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EXECUTIVE  SUMMARY 


S.l.  INTRODUCTION 


S.1.1.  Background 


Under  the  direction  of  the  U.S.  Army  Office  of  the  Program  Execu¬ 
tive  Officer-Program  Manager  for  Chemical  Demilitarisation  (PEO-PM  Cml 
Demil),  GA  Technologies  Inc.  (GA)  and  its  subcontractors  performed  a 
comprehensive  assessment  of  the  frequency  and  magnitude  of  accidental 
agent  releases  associated  with  various  alternatives  under  consideration 
for  the  Chemical  Stockpile  Disposal  Program  (CSDP).  This  assessment  was 
carried  out  in  support  of  the  environmental  impact  statement  (EIS)  for 
this  program  and  addresses  only  the  stockpile  of  chemical  nainitiona  that 
is  currently  stored  at  eight  eltes  in  the  continental  United  States 
(CONUS).  The  assessment  of  potential  health  consequences  to  the  public 
resulting  from  accidental  releases  calculated  in  this  study  will  be 
performed  in  a  separate  study.  These  consequences  and  the  GA-evaluated 
fr<  quencies  of  the  releases  leading  to  these  consequences  will  form  the 
basis  of  estimates  of  the  potential  public  “risks"  associated  with  the 
CSDP  alternatives. 


The  alternatives  investigated  in  this  study  sre  as  follows; 


1.  Disposal  of  the  agents  and  munitions  at  the  eight  existing 
storage  sites ■ 


2. 


Collocation  (transportation)  and  disposal  of  the  munitions  at 
two  regional  sites. 


3.  Collocation  and  disposal  of  tha  inanitions  at  a  single  national 
site . 

4.  Partial  collocation  of  tha  selactad  stockpiles  from  Aberdeen 
Proving  Ground  (APG)  to  Johnston  Island  by  water  or  to  Tooele 
Army  Depot  (TEAD)  by  air  and  from  the  Lexington-Blue  Grass 
Army  Depot  (LBAD)  to  TEAD  by  sir. 

5.  Continued  storage  of  the  sainitions  at  the  existing  storage 

eitea . 

This  report  addresses  only  the  continued  storage  alternative  listed 
above  (i.e.,  item  5).  The  other  alternatives  are  discussed  in  aeparate 
reports. 


S.1.2.  Study  Objectives  and  Deliverables 

The  primary  objectives  of  the  study  reported  in  this  document  wtit 

to: 

1.  Identify  events  that  could  initiate  the  release  of  agent  to 
the  environment  (i.e.,  initiating  events). 

2.  Develop  the  various  sequences  of  events  resulting  from  these 
initiators  and  leading  to  accidental  agent  release. 

3-  Perform  e  quantitative  analysis  of  the  frequency  of  occurrence 
of  esch  relevent  accident  sequence. 

4.  Characterize  the  physical  state,  quantity,  and  duration  of 
agent  released  from  each  accident  sequence. 

These  objectives  were  accomplished  by  developing  a  list  of  poten¬ 
tial  accident  sequences  for  each  major  activity,  estimating  the  frequen¬ 
cies  of  these  sequences,  and  calculating  the  magnitudes  of  released 


•gent  associated  with  these  sequences.  It  should  be  noted  that  only 
accident  sequences  that  survived  a  conservative  screening  process,  con¬ 
sidering  both  frequency  and  magnitude  of  agent  release,  are  included  in 
the  deliverables  of  this  project. 

S.1.3.  Scone  of  Study 


The  scope  of  effort  reported  in  this  document,  as  noted  earlier, 
did  not  Include  the  evaluation  of  agent  dispersion  to  the  environment 
and  the  consequences  to  the  public  resulting  from  such  releases.  As 
such,  the  title  of  this  report  is  more  appropriately  that  of  a  probabi¬ 
listic  "release*  analysis  as  opposed  to  a  probabilistic  "risk"  analysis, 
since  risk  is  usually  defined  as  the  product  of  frequency  and  conse¬ 
quence.  Therefore,  the  term  "risk,"  as  used  in  this  study,  refers  to 
the  frequency  of  accidental  agent  release  and  not  to  the  frequency  of 
the  agent  release  consequence  to  public  health. 

V.v  S.1.4.  Site  Descriptions 

There  are  eight  sites  in  the  CONUS  where  chemical  munitions  are 
currently  being  stored.  These  sites  ares  Tooele  Army  Depot  (TCAD), 
Anniston  Army  Depot  (ANAD) ,  Aberdeen  Proving  Ground  (APG),  Lexington- 
Blue  Grass  Army  Depot  (LBAD),  Newport  Army  Assaunition  Plant  (NAAP),  Pine 
Bluff  Arsenal  (PBA),  Pueblo  Depot  Activity  (PUDA),  and  the  Umatilla 
Depot  Activity  (UMDA). 


TEAD  la  locatad  in  north  cantral  Utah.  A  prototype  demilitariza¬ 
tion  plant,  the  Chemical  Agent  Munitiona  Disposal  System  (CAMPS)  facil¬ 
ity,  is  located  st  this  site.  The  eite  currently  etores  e  wide  variety 
of  chemical  munitions  and  bulk  agant  containers  of  mustard  and  tha  nerve 
agents,  GB  and  VX. 
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AN  AD  la  located  in  northeast  Alabama.  Tha  chemical  munitions 
atockpila  at  ANAD  consists  of  all  chamical  nan it Iona  types  except  for 
boobs,  spray  tanks,  and  8-in.  projactilas  f Iliad  with  VX. 

APC  is  located  in  Maryland  naar  tha  haad  of  tha  Chesapeake  Bay. 

APG  is  comprised  of  t\ro  general  areas,  the  Aberdeen  area  and  the 
Edgewood  area  where  the  chemical  munition  storage  facilities  are 
located.  Only  mustard- filled  ton  containers  are  stored  at  APG. 

LBAD  is  located  south  of  Richmond,  Kentucky.  The  chemical  munition 
atockpile  at  LBAD  consists  of  8-in.  projectiles,  155-mm  projectile* .  and 
M55  rockets. 

NAAP  is  located  west  of  Indianapolis,  Indiana.  The  chemical  tmni- 
tions  stockpile  is  stored  there  in  a  single  warehouse  and  consists  of 
containers  of  VX. 

PBA  is  located  southeast  of  Little  Rock,  Arkansas.  The  stockpile 
at  PBA  consists  of  MSS  rockets,  land  mines,  ton  containers,  and  some 
A. 2-in.  mortar  projectiles. 

UMDA  is  located  in  northeastern  Oregon.  The  stockpile  at  UMDA 
consists  of  155-mn  and  8-in.  projectiles,  MSS  rockets,  M23  land  mines, 
bombs,  spray  tanka,  and  ton  containers. 

S.2.  STUDY  APPROACH 

The  risk  analysis  presented  in  this  report  combines  the  structured 
safety  analysis  detailed  in  MIL-STD-882B  (Ref.  S-l)  and  the  probabilis¬ 
tic  approach  outlined  in  HUREG/CR-2300  (Ref.  S-2).  The  first  reference 
requires  that  hazards  analyses  be  performed  to  assess  the  risk  involved 
during  the  planned  life  expectancy  of  a  system.  It  also  provides  guid¬ 
ance  on  the  categorization  of  hazard  severity  and  of  probability  as  a 
means  of  identifying  which  hazards  should  be  eliminated  or  reduced  to  an 
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acceptable  leval.  The  second  reference  serves  as  a  guidebook  for  the 
risk  assessment  of  nuclear  power  plants. 


Risk  assessment  can  be  defined  as  the  quantification  of  an  undesir¬ 
able  effect  In  probabilistic  terms.  Relative  to  the  health  and  safety 
of  the  public,  the  effects  of  interest  are  injuries  and  deaths.  Risk 
assessment  has  been  utilized  in  various  industries  for  some  time. 
Insurance  companies  have  long  used  actuarial  data  for  statistical  eva¬ 
luations  to  Justify  differences  in  the  insurance  premium  paid  by  persons 
in  different  "risk"  categories.  The  risk  -ssmants  performed  for 
nuclear  power  plants,  on  the  other  hand,  are  examples  of  major  industry 
efforts  to  quantify  risks  of  low-frequency  events  for  which  no  good 
actuarial  data  exist.  The  nuclear  power  plant  risk  assessments  have 
become  models  for  other  industrial  risk  assessments. 


S.2.1.  Risk  Assessment  Methodology 

Probabilistic  risk  assessment  (PRA)  is  a  systematic,  disciplined 
approach  to  quantifying  the  frequency  and  consequences  of  events  which 
can  occur  at  random  points  in  time.  In  its  application  to  the  various 
chemical  munition  disposal  alternativea  currently  under  consideration, 
PRA  provides  a  comprehensive  framework  for  estimating  and  understanding 
the  risks  associated  with  the  storage,  handling,  transportation,  and 
demilitarization  activities  associstad  with  these  alternatives.  By 
applying  this  methodology  to  each  alternative  in  a  consistent  and  uni¬ 
form  manner,  a  statement  of  the  reletive  risk  of  these  alternetivea  can 
be  made.  Because  of  the  significant  uncertainties  in  the  data  used  to 
quantify  tha  frequency  of  occurrence  of  various  accldsnt  sequences  and 
the  magnitudes  of  the  essocieted  agent  releases,  extrsma  caution  must  be 
used  when  addressing  the  absolute  risk  associstad  with  ssch  disposal 
option. 


In  simplistic  terms,  the  PRA  process  focuses  on  answering  the  fol- 
loving  three  basic  questions: 

1.  Whet  cen  go  wrong? 

2.  How  frequently  Is  it  expected  to  happen? 

3.  Whet  would  be  the  associated  consequences? 

The  remainder  of  this  summary  describes  how  these  questions  are 
addressed  in  the  risk  assessment  of  the  chemical  materiel  disposal  pro¬ 
gram.  In  this  study,  the  estimation  of  consequences  is  limited  to  the 
magnitudes  of  agent  release  for  each  sequence. 

5.2.1.1.  Identification  of  Initiating  Events.  The  first  step  in  a  pro¬ 
babilistic  risk  assessment  is  the  identification  of  initiating  events 
which,  by  themselves  or  in  combination  with  additional  failures,  can 
lead  to  the  release  of  agent  to  the  environment.  Initiating  events  are 
identified  for  each  of  the  demilitarisation  activities.  Such  events 
generally  fall  into  two  broad  categories  known  as  "internal”  events  and 
"external"  events.  Internal  events  originate  within  the  activity  and 
are  caused  by  human  error  or  random  equipment  failure.  Examples  of  such 
events  are  the  dropping  or  puncture  of  mwltiona  during  handling  opera¬ 
tions,  and  the  random  failure  of  a  normally  operating  piece  of  equipment 
in  the  demilitarization  process  line.  The  class  of  events  referred  to 
as  external  Includes  aircraft  crashes  and  natural  phenomena  such  as 
earthquakes  and  storms.  In  the  context  of  a  risk  assessment,  svents 
auch  aa  intarnal  flooding  and  fires  sra  also  considered  to  be  external 
events.  External  evsnts  are  usually  pervasive  in  nature  in  thet  they 
ere  eaaumed  to  fell  redundant  equipment  thet  is  providad  for  safa  shut¬ 
down  of  the  operation  and  containment  of  tha  agant. 

5.2.1.2.  Accident  Sequence  Devalopmant.  Once  initiating  events  are 
identified,  logic  models  (auch  as  event  trees  and  aaquanca  lavel  fault 
treej)  are  developed  to  display  the  various  paths  that  the  accident  can 
take.  For  example,  an  initiating  event  such  es  spurious  shutdown  of  en 


'v'V'V 


M 


*• 


A 


•V 

& 


S-6 


incinerator  will  not  result  in  a  significant  release  of  agent  to  the 
environment  unless  numerous  ventilation  and  automatic  shutdown  systems 
fail.  In  most  cases,  the  probability  of  failure  of  sultiple  systems  is 
eo  low  that  the  frequencies  of  such  accident  sequencee  are  too  low  to  be 
of  any  concern.  Furthermore,  because  of  inherent  system  inertia  and 
engineered  safety  features  which  are  provided,  there  may  be  aag>le  time 
to  recover  and  repair  mitigating*  systems  prior  to  any  release. 

As  suggested  above,  operator  intervention  can  Influence  the  course 
of  an  accident,  and  therefore  his  role  must  be  included  in  the  logic 
models  where  appropriate.  Of  course,  operating  and  emergency  personnel 
also  nave  a  significant  Influence  on  the  potential  for  and  amount  of 
accidental  agent  release. 

S.2.1.2.  Human  Interactions.  Human  interactions,  or  Interventions,  of 
interest  to  the  chemical  munitions  disposal  risk  assessment  fall  into 
one  of  the  following  six  general  catagoriaat 

1.  Initiation  of  an  accident  by  committing  an  error  (e.g.,  a 
munitions  handler  punctures  or  accidsntslly  drops  s  nun it  ion). 

2.  Test  snd  maintensnce  actions  (e.g.,  a  valve  is  disabled  or 
left  in  the  wrong  configuration  following  a  teat  or  mainte¬ 
nance  act). 

3.  Termination  of  an  accident  by  correctly  isg>lementing  estab¬ 
lished  emergency  procedures  (e.g.,  an  operator  terminates 
agent  feed  to  the  liquid  incinerator  whan  automatic  termina¬ 
tion  has  fsiled). 

A.  Aggravation  of  an  accident  by  taking  incorrect  action  (a.g., 
a  plant  operator  misdiagnoses  the  nature  of  the  accident  and 

* “Mitigation"  as  uaod  in  this  report  la  the  act  of  preventing  or 
limiting  the  consequence  of  en  accident  that  haa  occurred. 


performs  in  act  which  causes  tha  accident  to  have  greater 
consequences ) . 

5-  Taimination  of  an  accidant  by  actiona  which  ara  outaida  tha 

acopa  of  axiating  procedural  (e.g.,  baaad  on  hia  knowledge  of 
tha  plant  or  proceaa,  a  plant  operator  perforate  an  act  which 
la  not  covered  by  procedures  and  terminates  or  mitigates  tha 
accidant ) . 

6.  Intentional  acta  to  initiate  accidanta  or  render  equipment  in 
a  failed  atata  (aabotage). 

Human  interactions  that  fall  in  tha  firat  three  categories  are 
modeled  either  as  a  separate  event  heading  in  the  event  tree  or  as  an 
independent  event  in  the  fault  tree  which  is  used  to  model  and  quantify 
the  event  in  the  event  tree.  Human  interactions  defined  by  categories  4 
and  5  above  are  difficult  to  quantify  and  as  such  are  not  given  much 
attention  in  a  risk  assessment. 

Acts  of  sabotage  (category  6)  are  outside  the  scope  of  this  analy¬ 
sis  and  will  be  addressed  elsewhere. 

S.2.1.4.  Agent  Release  Characterization.  The  consequences  of  an  agent - 
release  event  arc  dependent  on  the  type  of  agent,  the  magnitude  of  the 
release,  the  mode  end  duretion  of  the  release,  the  dispersion  of  the 
agent  to  the  environment,  the  demographic  characteristics  of  the  region 
impacted  by  the  release,  and  tha  toxicity  of  tha  dispersed  agent  at  the 
concentration  levels  to  which  members  of  the  public  are  exposed.  The 
scope  of  effort  reported  in  this  document  ie  limited  to  the  first  three 
characteristics  listed  above.  Agent  dispersion  to  the  environment  end 
subsequent  effects  on  humans  are  addressed  elsewhere  in  e  separate 


The  characterization  of  agent  release  required  a  systematic  review 
of  the  potential  modes  of  agent  release  from  its  normal  conf inement. 

The  agent  release  mechanism  is  dependent  on  the  particular  mechanical , 
thermal,  end  explosive  behavior  of  the  ounition,  assuming  the  occurrence 
of  an  initiating  event  such  as  dropping  during  handling  or  aircraft 
crash,  as  well  as  the  confinement  which  is  provided,  if  any. 

After  determining  that  agent  could  ba  released  in  a  particular 
accident  sequence  and  that  the  frequency  of  that  aequenca  axceeded  the 
threshold  screening  frequency,  an  analysis  was  performed  to  identify  the 
possible  peths  by  which  the  agent  could  be  released  to  the  environment 
end  to  estimate  the  quantity  of  agent  releeacd. 

S.2.1.5.  Sequence  Screening.  The  implementation  of  PRA  methodology  in 
terms  of  event  trees  can  produce  a  large  number  of  potentiel  accident 
sequences.  In  order  to  reduce  this  to  a  manageable  number  to  focus  on 
the  critical  scenarios  for  analysis,  the  accident  sequences  sre  screened 
for  frequency  or  consequence.  By  using  conservativs  values  for  the 
conditionel  probabilities  of  event  tree  branches,  it  is  possible  to  show 
that  many  of  the  possible  sequences  ere  of  sufficiently  low  frequency 
(e.g.,  less  than  10”*0  p<r  year)  that  they  need  not  be  addressed 
further.  In  addition,  if  an  accident  sequence  has  s  frequency  greater 
than  the  threshold  screening  frequency  but  results  in  en  Insignificant 
release  of  agent4  to  the  environment,  it  can  also  be  eliminated  from 
further  consideration.  The  accident  sequences  contained  in  this  report 
have  been  subjected  t*.  both  types  of  screening. 


*Less  then  14  lbm  of  nusterdi  less  than  0.4  lbm  of  agent  VXj  and 
lass  than  0.3  lbm  of  agant  GB.  Thaea  quantities  rapresant  the  minimus 
quantities  of  agent  release  that  would  rasult  in  a  lethal  dose  of  agent 
at  500  m  for  the  most  limiting  release  modes  (Ref.  S-3). 
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S.3.  RESULTS 


The  analysis  of  the  potential  for  agent  release  to  the  atmosphere 
from  accident  scenarios  related  to  the  continued  storage  alternative 
included  storage  and  handling  activities.  This  section  discusses  some 
of  the  accident  probability  and  agent  release  results  associated  with 
these  activities. 

The  results  of  the  analysis  of  the  various  activities  encompassing 
the  continued  storage  alternative  cannot  be  presented  in  the  same  units, 
i.e.,  annual  frequencies,  because  of  the  possible  divulgence  of  clas¬ 
sified  information.  This  is  only  possible  for  some  storage  accident 
scenarios.  For  accident  scenarios  related  to  the  handling  activities, 
the  unclassified  portion  of  the  probabilistic  analysis  is  given  in  terms 
of  frequency  of  accidents  per  pallet  of  minitions  (or  as  a  container  of 
munitions ) . 

The  evaluation  of  the  actual  risk  to  the  public  and  environment 
requires  agent  dispersion  calculations  which  are  not  in  the  scope  of  the 
study  reported  here.  Despite  this  limitation,  the  results  discussed 
herein  still  provide  useful  Insights  on  the  contributions  of  the  various 
disposal  activities  to  the  risk  of  an  agent  release.  These  insights  ere 
discussed  below. 

S •  3 •  1 .  Accident  Scenarios  During  Storage 

The  continued  storage  alternative  requires  some  storage  of  muni¬ 
tions  in  their  existing  location. 

S.3.1.1.  Internal  Events.  There  were  no  significant  internal  event 
initiators  of  accidents  during  storage.  Per  unit  operation,  forklift 
drop  accidents  occur  more  frequently  than  forklift  tine  punctures. 

Also,  the  use  of  a  lifting  beam  instead  of  a  tine  leads  to  an  order  of 
magnitude  decrease  in  drop  frequency. 
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S.3.1.2.  External  Events,  These  events  involve  eccldents  caused  oy 
natural  phenomena  or  human  activity  affecting  munitions  in  storage 
igloos,  open  storage  areas,  holding  areas,  or  warehouses.  If  these  are 
assumed  to  be  full  of  munitions,  the  agent  inventories  range  up  to  100, 
200,  1000,  and  20C0  tons,  respectively,  for  storage  igloos,  bolding 
areas,  open  areas,  and  warchousas.  The  most  frequent  external  accidents 
having  significant  release  involve  mild  intensity  earthquakes  or  small 
airplane  crushes  (order  depending  on  site).  Amounts  of  svsilsble  sgent 
inventories  released  in  these  events  are  on  the  order  of  fractions  of 
one  percent  or  less  (munition  punctures,  drops,  etc.). 

The  largest  releases  occur  for  a  larga  aircraft  crash,  a  meteorite 
strike,  or  a  severe  earthquake,  especially  when  a  warehouse  (at  NAAF, 
TEAD,  or  UMDA)  is  involved.  These  can  result  in  up  to  10  percent  of 
the  agent  inventory  released  for  scenarios  involving  a  fire  which  has 
the  potential  (duration)  for  destroying  the  satire  inventory  of  en  igloo 
or  warehouse.  The  mini t ions  stored  in  warehouses  contain  only  VX  or 
mustard  which  have  nurk  slower  evaporation  rates  than  GB  and  hence  are 
not  easily  disperaad  into  the  atmosphere.  Thus,  warehouse  scenarios 
involving  only  spills  are  not  significant  risk  contributors.  The  ware¬ 
house  at  UMDA  has  the  potential  for  the  largest  release.  Meteorite 
strike-initiated  sequence  median  frequencies  are  one  to  two  orders  of 
magnitude  lower  than  the  aircraft,  crash-induced  sequence  frequencies. 

As  expected,  munitions  stored  outdoors  are  generally  uort  susceptible  to 
large  aircraft  crashes  than  those  stored  in  warehouses  cr  igloos,  but 
releases  are  lower.  Both  APG  and  ISA  have  ton  containers  stored  out¬ 
doors,  and  the  aircraft  crash  probabilities  at  thaaa  sites  are  somewhat 
higher  than  at  the  other  aitaa.  Igloos  appear  to  provide  only  minimal 
protection  from  direct  crashes  of  large  planes,  but  releases  are  an 
order  of  magnitude  lower.  The  releases  era  more  severe  if  burstered 
munitions  are  involved. 


S . 3 . 2 .  Accident  Scenarios  During  Handlin 


Included  In  the  handling  analysis  ars  single  munition  or  pallet 
movements  by  hand,  forklift,  or  other  equipment. 

The  results  indicate  that  dropped  munitions,  whether  in  palletized 
form  or  not,  occur  more  frequently  than  either  forklift  tine  puncture  or 
forklift  collision  accidents.  In  fact,  the  frequency  of  forklift  colli¬ 
sion  accidents  which  lead  to  the  munitions  falling  off  the  forklift  is 
an  order  of  magnitude  lower  than  the  drop  accidents.  Furthermore,  the 
type  of  clothing  an  operator  is  wearing  while  handling  thaaa  tain it ions 
influence  the  drop  frequency  value.  An  operator  wearing  Level  A  cloth¬ 
ing  is  more  likely  to  comtu.t  an  error  that  would  cause  the  munition  to 
be  dropped  than  when  he  is  wearing  more  comfortable  clothing. 

For  bare  munitions,  the  rockets  seem  to  fce  the  most  prone  to  punc¬ 
tures  from  drops  or  forklift  tine  accidents. 

Bulk  items  that  are  punctured  lead  to  larger  releases  than  other 
munitions  such  as  projectiles  or  rockets.  Bombs  are  of  concern  because 
they  contain  GB  which  evaporates  more  readily  than  the  other  agent 
types.  The  agent  vapor  releases  range  up  to  170  lb  (thermal  failure  of 
all  munitions  in  a  pallet). 

Handling  accidents  which  lead  to  significant  agent  releases  (in 
particular,  agent  GB)  are  dominant  risk  contributors  because  of  the 
relatively  higher  annual  frequency  values.  Of  course  depending  on  the 
sctusl  munition  inventory,  the  vslue  of  annual  frsqusncy  may  either 
increase  or  decrease  when  converted  to  the  more  meaningful  per  stockpile 
basis 

S.4.  UNCERTAINTIES  IN  THE  ANALYSIS 

In  assessing  the  risks  associated  with  the  CSDP  alternatives,  every 
effoit  was  made  to  perform  best-estimate  analyses,  l.e.,  ‘realistic'' 
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evaluation  and  Quantification  of  the  accident  sequence  frequencies  and 
associated  agent  releases.  The  use  of  pessimistic  or  conservative 
modeling  techniques  or  data  for  quantification  violates  the  Intent  of 
the  probabilistic  nature  of  the  study.  Realistic  modeling  and  quali¬ 
fication  permits  a  balanced  evaluation  of  risk  contributors  and  compari¬ 
son  of  alternatives.  However ,  for  realistic  or  beat-estimate  calcula¬ 
tions  ,  the  obvious  concern  is  the  accuracy  of  the  results.  Uncertainty 
analysis  addresses  this  concern. 

S.4.1.  Sources  of  Uncertainty 

Since  the  event  sequences  discussed  in  Section  S.3  have  not 
actually  occurred,  it  is  difficult  to  establish  the  frequency  of  the 
sequence  and  associated  consequences  tdth  great  preciaion.  For  this 
reason,  many  parameters  in  a  risk  assessment  are  treated  as  probabilis¬ 
tically  distributed  parameters,  so  that  the  computation  of  sequence  fre¬ 
quencies  and  resulting  consequences  can  involve  the  probabilistic  combi¬ 
nation  of  distributions. 

There  are  three  general  types  of  uncertainty  aasociated  with  the 
evaluations  reported  in  this  document:  (1)  modeling,  (2)  data,  and 
(3)  completeness. 

There  exist  basic  uncertainties  regarding  the  ability  of  the  vari¬ 
ous  models  to  represent  the  actual  conditions  associated  with  the 
sequence  of  events  for  the  accident  scenarios  that  can  occur  in  the 
storage  and  disposal  activities.  The  ability  to  represent  actual  phe¬ 
nomena  with  analytical  models  is  always  s  potantial  concern.  The  use  of 
fundamental  models  such  as  fault  trass  and  svent  trass  is  aomstimes  sim¬ 
plistic  because  most  events  depicted  in  these  models  are  treated  as 
leading  to  one  of  two  binary  stateo:  success  or  failure  (i.e.,  partial 
successes  or  failures  era  ignored).  Model  uncertainties  are  difficult 
to  quantify  and  are  addressed  in  this  atriy  by  legitimate  efforts  of  the 
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Analyses  to  make  the  models  as  realistic  as  possible.  Where  such  real* 
ism  could  not  be  achieved,  conservative  approaches  were  taken. 

No  uncertainty  from  oversights,  errors,  or  omission  from  the  models 
used  (e.g.,  event  trees  and  fault  trees)  is  included  in  the  uncertainty 
analysis  results.  Including  these  uncertainties  is  beyond  the  state-of- 
the-art  of  present  day  uncertainty  analysis. 

The  uncertainties  in  the  assignment  of  event  probabilities  (e.g., 
component  failure  rates  and  initiating  event  frequencies)  are  of  two 
types:  Intrinsic  variability  and  lack  of  knowledge.  An  example  of 

intrinsic  variability  is  that  where  the  available  experience  data  is  for 
a  population  of  similar  components  in  similar  environments,  but  not  all 
the  components  exhibit  the  same  reliability.  Intrinsic  variations  can 
be  caused,  for  example,  by  different  manufacturers,  maintenance  prac¬ 
tices,  or  operating  conditions.  A  second  example  of  intrinsic  variabil¬ 
ity  ia  that  related  to  the  effects  of  long-term  storage  on  the  condition 
of  the  munitions  as  compsrad  to  thair  original  configuration.  Lack  of 
knowladge  uncartalnty  is  associated  with  cases  whara  the  model  parameter 
is  not  a  random  or  fluctuating  variable,  but  the  analyst  simply  does  not 
know  what  the  value  of  the  parameter  should  be.  Both  of  these  data 
uncertainty  types  are  encountered  in  this  study. 

S.4.2.  Uncertalnt les 

The  sequence  frequency  results  discussed  in  this  raport  are  pre¬ 
sented  in  terms  of  a  median  valua  and  a  rang#  factor  of  a  probability 
distribution  represanting  tha  frequancy  of  lntarast.  The  range  factor 
represents  the  ratio  of  the  95th  percentile  value  of  frequency  to  the 
50th  percentile  (i.e.,  median)  value  of  frequency.  The  uncertainty  in 
the  sequence  frequency  is  determined  using  the  STADIC-2  program 
(Ref.  S-4 )  to  propagate  the  uncertainties  associated  with  each  of  the 
events  in  the  fault  trees  or  event  trees  through  to  the  end  result. 

Some  scenarios,  such  as  those  associated  with  tornado  missiles  and  low- 


impact  detonations  have  rather  large  uncertainties.  The  difficulty  with 
tornado-generated  missiles  lieu  with  the  difficulty  in  accurately  model¬ 
ing  the  probability  that  the  vtlsaile  will  be  in  tha  proper  orientation 
to  penetrate  the  munition  and  in  predicting  tha  number  of  missiles  per 
square  foot  of  wind.  The  difficulty  with  tha  low-iapact  detonations 
lies  with  the  sparse  amount  of  data  available  and  its  applicability  to 
the  scenarios  of  interest.  In  general,  uncertainties  tend  to  be  large 
when  the  amount  of  applicable  data  is  small  and  vice  versa. 
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1.  INTRODUCTION 


1.1.  BACKGROUND 

The  U.S.  Department  of  Defense  is  required  by  Congress  (Public  Law 
95-145)  to  destroy  the  stockpile  of  lethal  chemical  agents  and  monitions 
stored  at  eight  U.S.  Army  installations  in  the  continental  United  States 
(CONUS)  and  at  the  Johnston  Atoll  Army  site  in  the  Pacific  Ocean  by  the 
end  of  September  1994.  The  locations  of  the  CONUS  sites  are  shown  in 
Fig.  1-1.  The  total  Army  stockpile  at  these  sites  is  siada  up  of  more 
than  3,000,000  items  consisting  of  rockets,  mines,  mortars,  projectiles, 
cartridges,  bombs,  spray  tsnks,  and  bulk  containers.  These  munitions 
contain  the  nerve  agents  GB  and  VX  and  the  blistering  mustard  agents  H, 
HD,  and  HT 

The  Army  has  developed  a  plan  for  destruction  of  the  chemical  muni¬ 
tion  stockpile.  This  plan  is  set  forth  in  the  Chemical  Stockpile  Dis¬ 
posal  Concept  Plan  submitted  to  Congress  in  March  1986  and  supplemented 
in  March  1987.  In  this  plan,  threa  disposal  alternatives  are  described) 

1.  Disposal  of  the  agents  and  monitions  at  each  of  the  eight 
existing  storage  sites. 

2.  Collocation  and  disposal  of  the  munitions  at  two  regional 
sites. 

3.  Collocation  and  disposal  of  the  munitions  at  a  single  national 
site. 

These  three  disposal  alternatives  were  also  described  in  a  Draft 
Progammatic  Environmental  Impact  Statement  published  by  the  Army  in 
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July  1986.  Additionally,  it  was  required  that  tha  atatua  quo,  i.a., 
continued  storage,  be  also  evaluated  as  the  fourth  alternative.  As  part 
of  the  public  conaentary  on  this  document,  requests  vers  made  of  the 
Army  to  consider  also  the  transport  of  the  inventory  from  Aberdeen 
Proving  Ground  to  Johnston  Island  by  wstsr  or  to  Tooele  Army  Depot  by 
air  and  from  the  Lexington-Blue  Grass  Army  Depot  to  Tooele  by  sir. 

Under  direction  from  the  U.S.  Army  Office  of  the  Program  Executive 
Officer-Program  Manager  for  Chemical  Demilitarization  (PEO-PM  Cml 
Demil),  GA  Technologies  Inc.  (GA)  and  other  contractore  have  performed  a 
comprehensive  probabilistic  assessment  of  the  frequency  and  magnitude  of 
agent  release  associated  with  activities  involving  the  three  disposal 
alternatives  currently  set  forth  in  the  Chemical  Stockpile  Disposal  Pro¬ 
gram  (CSDP),  as  well  es  the  continued  storage  alternative.  This  assess¬ 
ment  has  been  carried  out  in  support  of  the  environmental  Impact  state¬ 
ment  (EIS)  for  thle  program  and  it  addresses  only  tha  stockpile  of  chem¬ 
ical  munitions  which  are  currently  stored  at  the  eight  altea  located  in 
the  continental  United  States  (CONUS). 

When  combined  with  an  assessment  of  the  consequences  (injuries 
and/or  deaths)  to  the  public  resulting  from  the  accident  sequences  and 
associated  agent  releases  identified  and  evaluated  in  this  study,  the 
results  form  a  basis  for  an  assessment  of  public  risk.  The  dispersion 
of  the  agent  to  the  environment  and  the  assessment  of  consequences 
related  to  these  releases  ere  outside  the  scope  of  this  study.  A  conse¬ 
quence  assessment  has  been  performed  by  MITRE  Corporation  and  Oak  Ridge 
National  Laboratory  for  the  EIS,  based  on  the  releases  identified  in 
this  document. 

This  report  addresaes  only  the  alternative  of  continued  atorege. 

The  remaining  alternatives  are  discussed  in  separate  reports. 

Previous  studies  have  been  utilized  by  GA  as  reference  bases  for 
this  assessment.  Quantitative  hazards  analyses  were  performed  by 


Arthur  D.  Little,  Inc.  on  the  disposal  of  MSS  rockets  (Refs.  1-1  to 
1-5),  and  qualitative  hazards  analyses  were  performed  by  the  Ralph  M. 
Parsons  Company  on  the  Johnston  Atoll  Chemical  Agent  Disposal  System 
(JACADS)  design  (Refs.  1-6  and  1-7).  In  addition,  a  probabilistic  anal¬ 
ysis  of  chemical  agent  release  during  transport  of  MSS  rockets  has  been 
performed  by  BLR  Technical  Associates  (Ref.  1-8),  and  a  probabilistic 
analysis  of  selected  hazards  during  the  disposal  of  MSS  rockets  has  been 
performed  by  Science  Applications  International  Corporation  (Ref.  1-9). 
These  studies  provided  the  set  of  eccldent  scenarios  that  was  compiled 
in  a  systematic  order  by  MITRE  Corporation  (Refs.  1-10  and  1-11).  GA, 
in  turn,  used  these  accident  scenarios  as  a  starting  point  in  this 
study. 

The  analyses  performed  by  Arthur  D.  Little,  Inc.  used  a  technique 
known  as  hazard  and  operability  analysis  (HAZCP).  HAZOP  involves  a 
detailed  review  of  plant  design  to  trace  all  parts  and  functions  of  the 
demilitarization  process.  For  each  piece  of  equipment  or  pipe  run, 
deviations  from  normal  operating  conditions  were  examined  and  possible 
conaequencea  wire  discussed.  Through  this  approach,  potential  failure 
modes  leading  to  agent  release  outside  of  the  facility  were  identified. 
The  expected  frequencies  of  occurrence  of  all  agent  release  sequences 
identified  in  the  HAZOP  were  then  evaluated  using  fault  tree  analysis. 

The  qualitative  hazards  snalyais  performed  for  JACADS  used  an 
approach  known  as  failure  modes  and  effects  analysis  (FMEA).  The  sever¬ 
ity  and  probability  levels  of  identified  hazards  were  ranked  according 
to  the  guidelines  in  Ref.  1-12. 

The  transportation  studies  performed  by  BLR  Technical  Associates 
(Ref.  1-8)  used  a  combined  fault  tree  and  event  tree  approach  to  assess 
tl  a  frequency  of  agent  release  from  transportation  accidents. 
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Th«  work  performed  by  Science  Applications  International  Corpora- 
tlon  (Ref.  1-9)  on  the  disposal  of  MSS  rockets  utilized  both  event  tree 
and  fault  tree  methodology  as  used  in  the  FRA  of  nuclear  power  plants. 
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1.2.  STUDY  OBJECTIVES  AND  SCOPE 


The  primary  objectives  of  the  study  reported  Id  this  document  were 

tot 

1.  Identify  events  (for  each  major  activity)  that  could  initiate 
the  release  of  agent  to  the  environment. 

2.  Develop  the  various  sequences  of  events  resulting  from  these 
initiators  and  leading  to  agent  release. 

3.  Perform  a  quantitative  analysis  of  the  frequency  of  occurrence 
of  eech  relevant  accident  sequence. 

4.  Characterize  the  form,  quantity,  and  duration  of  agent  release 
from  each  accident  sequence. 

5.  Identify  accident  sequences  which  make  the  moat  significant 
contributions  to  risk. 

The  major  deliverables  of  this  effort  are  a  list  of  potential  acci¬ 
dent  sequences  for  each  major  activity,  the  estimated  frequencies  of 
these  sequences,  and  the  magnitudes  of  released  agent  associated  with 
these  sequences.  It  should  be  noted  that  only  accident  sequences  that 
survived  a  conservative  ecreenlng  process,  involving  both  frequency  and 
magnitude  of  agent  release,  are  included  in  these  deliverables. 

This  report  addresses  each  of  the  objectives  listed  above  and  pre¬ 
sents  the  enalysis  of  this  study.  The  risk  analysis  includes  an  evalu¬ 
ation  of  potential  accidents  and  natural  occurring  phenomena  such  as 
earthquakes  and  tornadoes.  Acts  of  war,  sabotage,  and  terrorism,  which 
lavolve  intentionally-initiated  events,  were  not  included  in  the  scope 
of  this  effort. 


The  term  "chemical  monitions"  is  used  here  to  describe  both  burat- 
ered  chemical  munitions  and  chemical  bulk  items.  The  4. 2-in.  mortars 
refer  to  the  actual  4 . 2-in.  projectile  which  is  fired  from  mortar  can* 
none  or  tubes.  The  105 -urn  cartridge  and  4.2-in.  mortar  projectile  can 
either  be  configured  with  propellant  (i.e.,  a  cartridge)  or  without 
propellant  (i.e.,  a  projectile)}  in  this  study,  it  was  assumed  that  the 
propellant  and  fuze  were  removed  prior  to  the  onset  of  the  disposal 
program. 
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1.3.  DEMILITARIZATION  ACTIVITIES  AND  SAFETY  CONCERNS 


Figure  1-2  chows  c  comparison  of  the  various  logistics  phases  aaso- 
cistsd  with  ths  various  rainition  disposal  sad  storage  alternatives  eval¬ 
uated  for  the  EIS.  As  indicated  in  this  figure,  the  demilitarization 
process  associated  with  the  continued  storage  option  involves  only  those 
events  related  to  long-term  storage. 

The  hazards  of  interest  are  those  involving  the  evaporative  release 
of  agent  to  the  environment  resulting  from  spills,  leaks,  and  mechanical 
failures,  and  the  release  of  agent  to  the  environment  resulting  from 
fires  and  explosions.  The  generation  of  these  potential  hazards  orig¬ 
inates  with  a  number  of  •internal*  and  •external*  initiating  events. 

The  number  of  hazard-initiating  event  combinations  is  rather  extensive. 
However,  because  of  the  screening  process  which  was  used  to  renx>ve  from 
further  consideration  the  accident  sequences  whose  frequency  was  low 
and/or  the  associated  magnitude  of  agent  release  was  low,  the  number  of 
individual  sequences  which  are  iiqportant  to  risk  is  relatively  small. 


Fig.  1-2.  Logistic  phases  associated  with  the  munitions 
storage  end  disposal  options 


1.4.  STUDY  ASSUMPTIONS 


The  risk  analysis  prasantad  in  this  raport  usas  an  approach 
that  combinaa  tha  structured  safety  analysis  detailed  in  MIL-STD-882B 
(Ref.  1-12)  and  tha  probabilistic  approach  used  in  tha  safety  analyses 
of  nuclear  power  plants  (Raf.  1-13).  Reference  1-12  requires  that  haz¬ 
ards  analyses  be  performed  in  order  to  assess  the  risk  involved  during 
the  planned  life  expectancy  of  a  system.  It  also  provides  some  guidanc 
on  the  categorization  of  hazard  severity  and  probability  as  a  means  of 
identifying  which  hazards  should  be  eliminated  or  reduced  to  a  level 
acceptable  to  the  managing  activity. 

The  risk  analysis  was  performed  under  the  following  set  of  general 
assumptions : 

1.  Munitions  will  be  stored  in  their  current  storage  locations. 

2.  Munitions  are  in  good  condition. 

3.  Sabotage  or  terrorism  is  not  considered. 

A  detailed  listing  and  discussion  of  assumptions  is  presented  in 
Appendix  E. 


1.5.  REPORT  FORMAT 


This  report  is  structured  ss  outlined  schematically  in  Fig.  1-3. 

The  structure  follow  that  typically  used  in  comprehensive  probabilistic 
risk  assessment  (PRA)  studies. 

Following  the  introduction  in  Section  1  of  this  report.  Section  2 
provides  a  summery  of  the  methodology  used  in  this  assessment,  Including 
the  procedure  for  accident  scenario  identification  and  screening,  the 
approach  used  for  quantifying  accident  frequencies  and  characterizing 
agent  release,  and  the  treatment  of  uncertainties. 

Section  3  provides  a  brief  discussion  of  the  various  activities 
involved  in  the  continued  storage  of  chemical  munitions.  This  discus¬ 
sion  is  provided  to  assist  readers  in  the  understanding  of  the  initi¬ 
ating  events  and  accident  scenarios  that  have  been  identified  and  are 
discussed  in  Section  5.  Section  3  also  discusses  site-specific  infor¬ 
mation  that  is  important  to  a  particular  site.  Appendix  D  contains 
additional  site  information. 

The  Hat  of  accident  initiating  events  which  have  been  analyzed  is 
along  with  the  analysis  of  their  occurrence  frequencies  are  presented  in 
Section  A.  These  events  include  accidents  from  internal  causes,  such  as 
inadvertent  impact  during  handling,  and  accidents  caused  by  external 
events,  such  as  earthquakes  or  aircraft  crashes. 

Section  5  preaents  the  detailed  development  end  anelyals  of  the  key 
accident  acenerios  resulting  from  the  initiating  events. 

Section  6  provides  the  beais  for  quantification  of  accident 
sequence  frequencies  including  munition  failure  probabilities,  the  date 
base  used  for  estimating  the  probabilities  of  event-trse  top  events  and 
Fault-tree  basic  evente ,  and  the  date  used  for  aeseaeing  human  error. 
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Fig.  1-3.  Outline  of  report  etructure 


The  characterization  of  agent  released  In  the  varl  -us  accident 
sequences  is  discussed  in  Section  7. 

Section  8  presents  the  overall  results  of  the  analysis. 

Supporting  data  and  calculations  for  the  study  are  contained  in  the 
appendices.  References  to  appropriate  appendices  are  made  throughout 
the  body  of  the  report. 
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2.  RISK  ASSESSMENT  METHODOLOGY 
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2.1.  OVERVIEW 


Th«  probabilistic  risk  assessment  (FRA)  methodology  used  in  this 
study  is  generally  consistent  with  the  PRA  Procedures  Guide  (Ref.  2-1) 
for  nuclear  power  plants.  Figure  2-1,  adapted  from  that  guide,  outlines 
the  risk  assessment  procedure  for  this  study.  Certain  specific  features 
of  the  chemical  munition  accidents  dictate  some  different  emphasis  and 
treatments  from  those  described  in  Ref.  2-1.  The  risk  assessment  steps 
corresponding  to  the  procedures  in  Fig.  2-1  are  as  followst 
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1.  Identify  accident  initiators  (initiating  events)  through 
information  collection,  hazarde  analyses,  or  the  use  of 
master  logic  diagrams.  The  initiating  events  are  classified 
as  external  if  they  originate  from  outside  the  munition  stor¬ 
age  and  maintenance  process  (such  as  aircraft  crash)  and  as 
Internal  otherwise. 

2.  Define  accident  scenarios,  i.e.,  combinations  of  initiating 
events  and  the  successes  or  failures  of  systems  that  respond 
to  the  initiating  event.  An  'accident  sequence”  is  referred 
to  in  this  report  as  a  specific  end  point  of  an  accident  sce¬ 
nario,  which  is  usually  modeled  using  event  trees.  An  "event 
tree"  is  an  inductive  logic  model  which  traces  the  sequence  of 
events  that  can  occur  following  an  initiating  event. 

3.  Construct  ‘fnult  trees”  (deductive  system  logic  models)  to 
determine  the  root  causes  of  individual  system  failures.  The 
fault  tree  Is  reduced  to  minimal  cut  sets  using  Boolean  alge¬ 
bra.  A  "minimal  cut  set*  represents  s  unique  combination  of 
events  leading  to  system  failure. 
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Assign  fsilurs  rates  or  probabilities  to  events  (compononts  or 
subsystem)  modeled  in  tho  event  trsss  and  fault  trass.  Quan¬ 
tify  tha  fraquanciaa  of  oceurranca  of  accldant  sequences  from 
aithar  tha  avant  traa  or  fault  traa  by  computing  tha  product 
of  tha  initiating  avant  frequency  and  tha  probabilitlas  of  tha 
subaaquant  conditional  avant*  in  a  givan  accldant  scenario. 

Datarmin*  tha  consaquancaa  of  tha  accident  saquancas.  In  this 
analyaia,  tha  consequence  of  concern  is  tha  amount  of  agent 
released  to  tha  local  free  environment.  Tha  impact  of  agent 
release  on  tha  population  will  be  used  by  others  in  their  CSDP 
analysis . 

Evaluate  the  uncertainties  in  the  data  base,  and  predict  the 
uncertainty  in  each  relevant  accident  sequence  frequency  by 
propagating  the  top  avant  uncertainties  through  the  avant 

trees- 

Prasant  tha  results  (i.e.,  accident  scenario  frequency  and 
consequence)  in  a  fora  that  will  bast  show  those  saquancas 
that  era  important  to  risk  and  will  reflect  tha  uncertainties 
associated  with  tha  accident  sequence  frequency. 


2.2.  INITIATING  EVENTS 


An  initiating  event  (IE)  ie  a  aingle  occurrence  or  malfunction  that 
haa  tha  potantlal  to  ralaaaa  one  or  more  agents  or  to  start  a  sequence 
of  events  that  could  lead  to  a  ralaaaa.  Tha  list  of  IEs  is  developed 
based  on  previous  demilitarisation  studies  (Section  1.2)  and  related 
PRAs  such  as  Waste  Repository  studies  (e.g.,  Ref.  2-2) ,  in  addition  to 
the  use  of  master  logic  diagrams. 

The  IE  list  is  developed  in  top-down  fashion  by  structuring  a  mas¬ 
ter  logic  diagram  to  define  a  functional  set  of  initiating  categories. 
These  categories  form  a  complete  sat  in  the  sense  that  any  event  which 
leads  to  agent  release  oust  causa  at  least  one  of  these  categories  to 
occur . 

Some  acoBD»n  c t  ise  Initiating  events1  (•<. g.  ,  an  earthquake)  can 
activate  more  than  one  initiating  event  category  and  disable  controls 
for  release.  While  there  is  no  way  to  guarantee  that  all  such  events 
are  identified,  tw  areas  yield  the  most  significant  events.  The  first 
Includes  severe  environmental  events  (such  as  firs,  flood,  earthquake, 
and  wind)  as  well  as  hazardous  activities  in  the  vicinity  (such  as  air¬ 
craft  patterns).  The  second  area  includes  malfunctions  that  can  affect 
multiple  controls  or  barriers  for  the  prevention  of  release  to  the 
atmosphere . 

Coincident  with  the  development  of  the  list  of  initiating  events  is 
the  assessment  of  the  initiating  event  frequencies.  This  is  rsqulrsd, 
first,  for  subssqusnt  qusntlf icstion  of  evsnt  trsss,  sines  ths  evsnt 
initiator  is  ths  first  avsn  of  tha  trss.  Second,  it  enables  screening 
of  tha  Hat  of  initiating  avanta,  i.e.,  events  having  extremely  low  fre¬ 
quencies  can  bs  sllminstsd.  Whsrs  possible  the  IEs  era  groupsd  into 
catagoriaa  whan  ths  subssqusnt  evsnt  trss  and  rslssse  analysis  develop¬ 
ment  la  tha  same  for  all  IEs  in  tha  category.  This  grouping  is  per¬ 
formed  by  Boolean  automation  of  tha  occurranca  frequencies,  accounting 
for  dependencies,  if  any. 
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2.3.  SCENARIO  DEVELOPMENT  AND  LOGIC  MODELS 

Given  the  occurrence  of  en  initiating  event,  accident  scenarios  are 
developed.  In  many  cases  using  logic  aodela  of  either  event  trees,  fault 
trass,  or  both,  to  arrive  at  the  various  outcomes  of  the  scenario  pro¬ 
gression.  Each  of  these  outcomes,  termed  a  sequence,  is  associated  with 
(or  even  characterized  by)  e  certain  level  of  agent  release.  The  basic 
premise  of  the  risk  summation  process  is  that  release  frequencies  (ini¬ 
tiating  event  frequency  sultiplicatively  combined  with  probabilities  of 
subsequent  failures  necessary  to  get  the  release)  of  entirely  different 
sequences  can  be  additively  combined  to  get  the  overall  frequency  of 
release.  The  additive  and  multiplicative  combination  is  performed  using 
Boolean  algebra  and  accounts  for  dependencies. 
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Figure  2-2  shows  a  sample  event  tree.  In  this  example,  the  IE  is  a 
vehicle  collision,  having  an  estimated  occurrence  frequency  which  can  be 
a  point  estimate  or  be  probabilistically  distributed.  The  IE  is  the 
first  "top  event,"  and  potential  subsequent  failures  represent  the  other 
top  events  or  branch  points.  These  top  events  are  in  the  form  of  ques¬ 
tions,  and  by  convention  the  upper  branch  represents  the  positive  answer 
sequence  and  the  lower  branch  is  the  negative  answer  sequence.  Branch 
split  fractions  or  probabilities  are  assigned  at  each  of  these  branch 
points.  These  split  fractions  may  be  point  estimates  or  probabilistic 
distributions,  end  may  not  be  the  same  for  ell  branch  points  under  e 
specific  top  event,  depending  on  prior  events.  That  is,  the  split 
fractions  represent  conditional  probabilities. 


The  frequency  of  an  accident  sequence  is  calculated  baaed  on  the 
following  equation: 
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where  Fj  *  frequency  of  accident  sequence  J, 

Ij  *  initiating  event  frequency, 

P^j  •  conditional  probability  of  sequence  event  i  following  an 
initiating  event,  I j . 

Accident  frequency  and  equipment /component  failure  rate  data  were 
derived  from  various  sources,  as  described  in  Section  9. 

In  this  study,  the  event  trees  are  relatively  simple  in  form 
compared  to  those  developed  for  nuclear  plant  PRAs.  Most  dependencies 
are  modeled  explicitly  in  the  event  trees  by  use  of  conditional  branch¬ 
ing  probabilities  which  are  dependent  upon  the  branch  taken  for  prior 
events.  For  example,  in  an  event  tree  where  two  consecutive  top  events 
represent  the  availabilities  of  systems  1  and  2,  system  2  might  not  be 
called  upon  unless  system  1  fails.  This  would  be  shown  in  the  event 
tree  by  a  dashed  line  for  system  2  in  the  system  1  success  branch,  indi¬ 
cating  not  applicable.  Conversely,  if  system  2  is  capable  of  operating 
only  in  conjunction  with  successful  operation  of  system  1,  the  dashed 
line  la  shown  on  the  system  1  failure  (no)  branch  for  system  2  top 
event.  This  indicates  a  guaranteed  failure  of  system  2,  given  nonoper¬ 
ation  of  system  1. 

For  many  scenarios,  it  was  found  convenient  to  use  fault  tree 
logic  for  development  of  the  accident  progression  and  quantification 
of  the  sequence  frequencies.  Figure  2-3  depicts  a  sample  fault  tree. 
Logic  symbols  used  in  constructing  fault  trees  are  defined  in  Fig.  2-1*. 
The  approach  taken  for  treatment  of  dependencies  in  the  event  trees 
is  to  identify  specific  intercomponent  and  intersystem  causes  of  multi¬ 
ple  failures,  if  any,  directly  in  the  fault  tree  and  to  make  an  allow¬ 
ance  for  those  not  explicitly  identified.  A  Beta  factor  method  (e.g., 
Ref.  2-3)  is  a  convenient  tool  for  determining  a  suitable  allowance  and 
was  used  where  appropriate.  In  this  method,  multiple  failures  of  redun¬ 
dant  components  are  assumed  to  occur  in  a  dependent  fashion;  the 
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OUTPUT  (A)  EXISTS  ONLYWHEN 
ALL  INPUTS  (E>  EXIST.  THE 
NUMBER  OF  INPUTS  MUST  BE  AT 
LEASTTWD.  INDICATES 
REDUNDANCY. 

P(A)  •  P(E1)  x  P(E2)  x  P(E3) »  ETC. 
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OUTPUT  (A)  EXISTS  WHEN  ONE 
OR  MORE  INPUTS  IE)  EXIST. 

THE  NUMBER  OF  INPUTS  MUST 
BEAT  LEAST  TWO. 

P<A)»?(E1)*P(E2)*P<E3I  +  ETC. 


'RESULTANT 

FAULT 

EVENT" 


"BASIC 

INPUT 

EVENT" 


THE  FAULT  CONDITION  THAT 
EXISTS  WHEN  INPUT  (E)  EXISTS. 


A  SPECIFIC  FAILURE  TO  WHICH 
A  FAILURE  RATE  OR  RELATIVE 
PROBABILITY  CAN  BE  ASSIGNED. 
OUTPUT  (A)  EXISTS  WHEN  THE 
FAILURE  EXISTS. 


SUBSTITUTE  FOR  A  BASIC  INPUT 
EVENT  WHEN  THE  FAILURE  IS  NOT 
"UNDEVELOPED  TRACED  TO  A  SPECIFIC  SOURCE. 

EVENT"  THIS  SYMBOL  CAN  REPRESENT 

ANOTHER  FAULTTREE  AT  a  lower 
LEVEL  WHICH  HAS  NOT  BEEN  DRAWN. 


"HOUSE" 


THE  HOUSE  REPRESENTS  AN  EVENT 
WHICH  IS  NORMALLY  EXPECTEO  TO 
OCCUR  OR  NEVER  TO  OCCUR.  IT  IS 
TREATED  AS  A  SWITCH  ON  THE  TREE 
ANO  IS  SET  ON  OR  OFF. 


'TRANSFER" 


INDICATES  TIE-IN  TO  A  SEPARATE 
FAULTTREE. 
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Definition  of  fault  tree  symbols 
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parameter  is  defined  as  the  fraction  of  failures  experienced  in 
components  that  ere  comaon  cause  failures. 

Just  as  there  are  uncertainties  in  estimating  component  failure 
rates,  thers  are  also  uncertainties  in  the  factor.  These  uncer¬ 
tainties  were  quantified  assuming  a  lognormal  dlntribution  for  the  p 
factor.  The  uncertainty  distribution  accounts  for  uncertainties  due  to 
sparsity  of  dsta,  as  well  as  those  due  to  classification  and  the  so- 
called  ’’potential  common  cause  failures.*  These  are  events  in  which  one 
failure  actually  occurs  and  additional  failures  could  beve  occurred 
under  different  circumstances ,  as  well  a s  incipiant  failuraa  and 
dagreded  operability  states. 

In  the  cese  where  the  feult  sequence  i,  given  an  inltiatirg  event, 
involves  e  subsystem  or  equipment  failure,  the  failure  probability  cal¬ 
culations  msy  involve  not  only  the  calculation  of  the  unavailability 
value  (probability  of  failure  per  demand)  but  elao  the  unreliability 
value  (probability  of  failure  while  component/equipmant  ia  running).  In 
this  case,  tha  overall  failura  probability  value  for  a  given  aquipment 
or  subsystem  is  calculated  using  the  following  equation  (Ref.  ?.-3)  . 

"  ^*i,d  +  ( 1  *  ?i,d)  ^i,  r  »  (2-.  i 

where  Pi,d  ■  failure  upon  demand  (unavailability), 

Pi,r  “  failure  while  tunning  (unreliability). 

Tha  calculation  of  component  unavailability  (P^^)  Influenced 
by  several  factors i  (1)  the  frequency  of  periodic  maintscancs  (PM) t 
(2)  the  use  of.  different  failure  detection  systems;  and  (3)  the  various 
methods  used  to  monitor  equipment  operation. 

For  the  analysis  prsaented  In  this  rsport,  two  options  were  consid¬ 
ered  in  the  calculation  of  component  unavailability.  The  first  option 
is  to  consider  the  periodic  maintenance  of  s  ccmponsnt.  Thus,  then  s 
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component  is  periodically  removed  from  service  for  preventative  mainte¬ 
nance,  the  failure  probability  is  dominated  by  the  maintenance  interval 
in  addition  to  the  failure  rate  according  to  the  following  equation! 


?i,r 


1_ 

\6 


(1  -  e"M 


(2-3) 


where  X  •  failure  rate, 

6  <•>  maintenance  interval, 

The  second  option  was  to  consider  continuous  cooponent  surveillance 
which  decreases  the  failure  probability  by  announcing  component  failure 
to  the  operators  concurrent  with  failure  initiation.  The  repair  time 
required  to  restore  the  component  becomes  an  important  factor  as  shown 
in  the  following  equation: 


*i,r  -  rrr  t1  -  «_(X+i/)t]  .  <2-m 

where  V  •  1/r  mean  repair  rate  (per  h), 

T  -  repair  time  (h), 
t  ■  time  interval  of  interest  (h). 

In  Eq.  2-4  the  failure  probability  approaches  XT  as  the  time  interval 
increases  and  Xr  is  small  (i.e.,  Xr  <<  1). 

In  most  of  the  component  failures  identified  in  the  fault  tree 
models,  the  first  option  is  used  end  s  monthly  maintenance  Interval  is 
assumed  (i.e.,  interval  of  528  h)  for  the  equipment.  This  ia  a  conser¬ 
vative  approach  in  deriving  the  failure  probability.  If  a  more  frequent 
maintenance  policy  is  adopted  or  if  experience  shows  that  the  component 
restoration  time  is  much  less  than  tha  maintenance  Interval,  the  failure 
probability  will  decrease.  However,  in  view  of  the  nature  of  the  fault 
tree  models,  this  approach  seems  justified  because  the  failure  contribu¬ 
tion  of  e  particular  component  is  not  negated  by  assuming  an  unnecesaar- 
ily  low  failure  probability. 
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2.4.  HUMAN  FACTORS 


The  traatrae.-t  of  Intersystem  aad  intercomponsnt  equipment  depen¬ 
dencies  is  diseased  ebove,  including  hov  the  dependencies  ere  teken 
Into  eccount  by  the  logic  models.  This  section  describes  another  kind 
of  dependencc--thet  involving  human  interaction. 

To  the  extent  that  human  beings  design,  construct,  operate,  end 
maintain  the  plant,  it  is  impossible  to  fully  lsolete  the  role  of  human 
interactions  from  any  of  the  dependencies  discussed  above  in  terms  of 
hardware  interactions.  Bence,  all  of  the  common  causa  analysis  methods 
described  above  pertain  directly  or  indirectly  to  human  interactions. 

The  discussion  is  restricted  hare  to  human  interactions  in  the  operation 
and  maintenance  processes. 

The  procedure  for  analysis  of  Intersystem  and  lntercomponent  depen¬ 
dencies  caused  by  human  interactions  was  to  include  human  errors  of 
omission  and  commission  explicitly  in  the  event  tree/fault  tree  models 
and  to  use  the  human  reliability  methods  of  Swain  (Ref.  2-4)  to  imple¬ 
ment  quantification.  A  starting  point  for  the  identification  of  spe¬ 
cific  errors  is  the  analysis  of  operation  and  maintenance  procedures  if 
they  have  been  defined  for  the  event  sequence  being  investigated.  This 
is  especially  important  if  operator  action  is  required  to  effect  actua¬ 
tion  of  e  system  or  a  collection  of  systems.  Consideration  needs  to  be 
given  to  possible  incorrect  Judgments  as  to  tha  plant  state  end  subse¬ 
quent  implementation  of  the  wrong  procedures.  Once  these  acts  are  iden¬ 
tified  and  modalad,  the  problem  of  determining  contribution  to  risk  by 
opsrator  actions  is  reduced  to  assigning  the  correct  human  error  rate 
values. 


2.5.  RELEASE  CHARACTERIZATION 


The  risk  aeaociated  with  each  accident  acanario  raquiraa  not  only 
the  quantification  of  tha  fraquancy  of  that  acanario  but  a  characterise- 
tion  of  tha  agent  ralaaaa  aa  wall.  Thla  characterisation  involves  the 
type  and  amount  of  agent  released,  plus  tha  mode  and  duration  of  tha 

release . 

At  any  given  time,  there  la  at  least  one  containment  barrier  aspe¬ 
rating  the  agent  from  tha  surrounding  environment.  Thus  failure  or  loot 
of  Integrity  of  this  barrier  must  occur  for  agent  to  be  released  to  the 
environment . 

In  ganeral,  the  accident  scenarios  of  inteteat  are  those  scenarios 
in  which  the  agent  ia  initially  Inside  the  mnltion.  There  are  essen¬ 
tially  three  types  of  agent  release  to  the  environment i 

1.  Evaporation  from  a  liquid  spill. 


2.  Releases  resulting  from  detonations. 

3.  Releases  resulting  from  fires. 


Various  combinations  of  those  releases  appear  in  many  of  the  scenarios. 
In  addition,  depending  on  the  location  of  these  evanLe  (a.g.,  Indoor 
versus  outdoor  spills),  the  evaporation  rates  governing  these  releasee 
may  vary  somewhat. 

The  approach  taken  for  sseeesing  the  amount,  type,  and  duration  of 
agent  release  la  baaed  on  deterministic  models  which  stem  from  previous 
dofillltei last  ion  safety  etudles  described  in  Section  1.1.  Theee  models 
are  based  largely  on  date  but  also  engineering  judgment.  They  ere 
described  in  Section  10.1. 

Elements  of  the  model  include  cor r e 1  at  1  one  for  evaporation  release, 
based  on  the  D2FC  computer  program.  In  many  cases,  the  D2FC  compute i 
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program  waa  uaad  diractly  to  calculate  avaporative  ralaaaaa.  Other  ala- 
•enta  Include  tha  fraction  of  burning  agar.t  which  la  ralaaaad  aa  vapor 
and  tha  fraction  of  a  detonating  Munition  inventory  which  ia  ralaaaad  aa 
vapor.  Tha  aodel  rallaa  heavily  on  data  and  analyaia  of  auaitiona  fail¬ 
ure  threaholda,  autmerlted  in  Appendix  P,  to  determine  tha  extant  of 
mmltion  failure#,  including  tha  potential  for  failure  propagation  of 
minltiona.  It  la  thla  area  where  engineering  judgment  wax  needed  to 
aupplemant  tha  data  and  analyaia.  Where  judgmental  factora  entered  in, 
they  were  routinely  made  in  a  coneervatlve  manner  to  cover  poaaibla 


uncar  taint  lea . 


2.6.  UNCERTAINTY  ANALYSIS 


Estimates  of  failure  probabilitiaa  darivad  from  varioua  data 
sourca*  ara  subject  to  uncertainties.  Data  aourcaa  do  aot  always  opa¬ 
cify  what  failura  modes  ara  represented,  what  operating  environment  la 
applicabla,  or  what  la  tha  total  atatiatical  population.  In  aoma  caaaa, 
failure  data  may  not  ba  available  for  a  apacific  event;  therefore,  data 
for  avanta  that  occur  under  conditiona  that  ara  aimilar  to  the  cventa 
under  conaiderat ion  ara  aelected  aa  rapraaentativa.  Thaaa  cooaider- 
atlona  raault  in  uncartaintiaa  that  ara  reflected  in  tha  range  of  pos¬ 
sible  numerical  valuea  for  an  avant. 

For  avanta  involving  equipment  failures,  a  lognormal  diatribution 
was  assumed  to  define  the  uncertainty  in  the  failura  probability.  The 
lognormal  diatribution  was  explicitly  used  in  Raf.  6-18  and  other  PRA 
studies  of  nuclear  power  plants  because  of  ita  mathematical  behavior. 

For  tha  analysis  covered  in  thia  report,  equipment  failures  and  accident 
initiators  that  ara  either  man-made  or  arise  from  natural  causes  are 
assumed  to  be  lognormally  distributed. 

In  the  analysis  of  accident  scenario  probabilities,  tha  STADIC-2 
computer  program  (Ref.  2-5)  wae  used  to  combine  probability  distribu¬ 
tions  of  a  aeries  of  event  aaquencea  which  make  up  an  accident  scenario. 
STADIC-2  uses  a  Monte  Carlo  simulation  technique  to  generate  a  pseudo¬ 
random  sample  statistical  distribution  for  a  user-defined  output  func¬ 
tion.  Each  input  variable  exhibits  random,  statistical  variations  that 
era  represented  by  a  particular  probability  distribution  (lognormal, 
normal,  etc.).  The  statistical  distribution  for  tha  output  function 
(and  accident  scenario  probability  in  this  case)  is  generated  by  com¬ 
bining  the  distributions  in  accordance  with  the  mathematical  operations 
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specified  by  thee  function.  Thie  combining  of  distribution*  is  accom- 
plished  s-s  follows  > 

1.  Escb  Monte  Csrlo  sample  consists  of  selecting  one  pseudo¬ 
random  sample  value  for  each  input  variable  from  its  corre¬ 
sponding  statistical  distribution. 

2.  The  set  of  sample  variable  values  are  mathematically  combined 
to  find  the  corresponding  value  of  the  function. 

3.  Sampling  is  continued  in  this  manner  until  the  desired  samplr 
site  is  attained. 

A.  The  results  consist  of  the  pseudo- randomly  generated  values  of 
the  output  function. 

Probabilistic  data  base  uncertainties  are  the  on 'y  uncertainties 
explicitly  quantified  in  this  analysis.  Although  data  base  uncertain¬ 
ties  are  important,  the  accident  frequency  calculetlons  are  also  sensi¬ 
tive  to  assumptions  incorporated  into  the  probabilistic  assessment. 

Since  the  uncertainties  in  these  assumptions  are  extremely  difficult  to 
quantify,  conservative  assumptions  ars  conslstsntly  used  in  this  risk 
anslysis . 

Figure  2-5  deplete  the  Impact  of  this  methodology  (identified  as 
Method  1  in  the  figure)  on  the  accident  frequency  aesessment  results. 
Essentially,  this  methodology  produces  e  conservative,  nominal  frequency 
estimate,  end  underestimates  tho  size  of  the  confidence  bends.  However, 
the  error  associated  with  the  confidence  bend  estimate  primarily  results 
in  prsdicting  a  much  higher  vslus  for  the  lower  confidence  band  than 
actually  exists  (compere  the  results  of  Methods  1  end  3  in  Fig.  2-5). 
Hence,  the  uncertainty  assessment  methodology  eo^loyed  in  this  analysis 
overestimates  nominal  sccidsnt  frsqusncieo  end  the  confidence  in  the 
predicted  frequency. 
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3.  CONTINUED  STORAGE  DESCRIPTION  OVERVIEW 


Chemical  munitions  ere  currently  stored  et  eight  CONUS  sites 
(Fig.  1-1).  A  description  of  the  CONUS  sites,  including  local  maps,  is 
given  in  Appendix  D.  Section  3.2  provides  a  sunmary  description  of  the 
munitions. 

A  detailed  discussion  of  the  long-term  storage  and  handling  oper¬ 
ations  associated  with  the  continued  storage  option  is  presented  in 
Appendix  G.  Section  3.1  provides  a  summary  of  these  activities  as  they 
relate  to  the  risk  study. 

3.1.  CONTINUED  STORAGE  ACTIVITIES  AND  RISKS 

The  major  activities  for  the  continued  storage  option  involve  long¬ 
term  storage  as  well  as  handling  activities  sssocisted  with  surveillance 
and  maintenance.  They  are  discussed  in  the  following  paragraphs. 

3.1.1.  Storage 

During  storage,  the  only  planned  activities  are  monitoring  for 
leakage,  surveillance  maintenance  and  repair  r*  -  aitiona  in  the  stock¬ 
pile.  Internal  events  for  storage  thus  address  leakage  between  inspec¬ 
tions  and  munition  drop  or  forklift  tine  puncture  during  munition  han¬ 
dling.  The  stored  munitions  are  susceptible  to  external  events,  such  as 
fire,  tornado,  aircraft  or  meteorite  crash,  earthquake  flood,  and 
lightning. 


3.1.2.  Handling 


Basically,  the  risks  associated  with  handling  operations  stem  from 
accidents  caused  by  equipment  failures  or  human  srror.  The  types  of 
accidents  are:  vehicle  collisions,  forklift  tine  punctures,  and  drops 
of  munitions.  The  munitions  affected  may  be  single,  in  bare  pallets,  or 
in  a  container.  The  locations  of  the  agent  release  may  be  indoors,  or 
in  the  open  (outdoors).  Externally  caused  handling  accidents  were  not 
considered  in  this  analysis  because  of  the  short  time  spans  for  actual 
outdoor  handling  operations. 

3.2.  MUNITIONS  DESCRIPTION 

This  section  describes  the  munitions  that  comprise  the  CONUS  muni¬ 
tions  stockpile.  The  munitions  stored  at  each  site  are  summarized  in 
Fig.  1-1.  As  indicated  the  inventory  of  munitions  end  bulk  agent  in 
storage  differs  greatly  from  site  to  site.  Detailed  information  on  the 
precise  numbers  of  chemical  agent  munitions  at  each  site  is  classified 
except  for  the  information  on  M55  rockets.  All  of  the  chemical  muni¬ 
tions  in  storage  are  at  least  18  yr  old  (production  of  new  chemical 
monitions  was  stopped  in  1968),  and  some  are  more  than  40  yr  old. 

The  munitions  stockpile  consists  of  11  different  munition  types. 

A  detailed  description  of  each  munition  type,  including  a  discussion  of 
their  thresholds,  is  presented  in  Appendix  F.  A  brief  description  of 
the  monitions  follows. 

3.2.1.  Rockets 


The  M55  rockets  are  filled  with  either  CB  or  VX.  The  rockets  are 
equipped  with  fuzes  and  bursters  which  contain  explosives.  Propellant 
is  also  built  into  the  motor  of  the  rocket.  The  rocket  casing  is  made 
of  aluminum.  Some  of  the  rockets  have  a  leakage  problem. 
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The  rockets  are  individually  packaged  in  fiberglass  shipping  tubes 
with  metal  end  caps.  Fifteen  containers  with  rocket*  are  packed  on  a 
wooded  pallet. 

3.2.2.  Land  Mines 


Mines  contain  VX  and  explosive  charges.  The  mines  are  packaged 
three  to  a  steel  drum.  Mine  activators  and  fuzes  are  packaged  sepa¬ 
rately  in  the  same  drum.  Twelve  drums  of  mines  are  contained  on  a 
wooden  pallet. 

3.2.3.  Projectiles  and  Mortars 

The  nainitions  stockpile  contains  105-mm  projectiles  with  GB  or  mus¬ 
tard,  155 -mm  projectiles  with  GB,  VX,  or  Bustard,  8-in.  projectiles  with 
GB  or  VX,  and  A. 2-in.  Btortar  projectiles  with  Bustard.  Some  105 -nm  pro¬ 
jectiles  are  stored  as  complete  rounds  containing  fuze,  burster  with 
explosive,  cartridge  case  and  propellant,  while  others  sre  stored  with¬ 
out  bursters,  fuzes  and  propellant.  Mortars  are  stored  with  fuzes,  bur¬ 
sters,  and  propellants.  Projectiles  (155-bbb  and  8-in.)  are  also  stored 
with  and  without  bursters.  For  this  study,  it  was  assumed  that  fuzes 
and  propellants  have  been  removed  from  the  4.2-in.  mortars  and  105-mm 
cartridges . 

The  105-ran  projectiles  are  packed  24-projectiles  to  a  pallet,  and 
the  4.2-in.  mortar  projectilea  ara  packed  48-projectiles  to  a  pallet. 

155-mm  and  8-in.  projactilea  ara  packaged  eight  and  six  projectiles 
on  e  wooden  pallet,  respectively. 

3.2.4.  Bombs 


ere 


There  are  three  types  of  bombs,  all  containing  GB  agent.  These 
the  MC- 1 ,  e  730-lb  bomb,  the  KK-94,  a  500-lb  bomb,  and  the  MI3-116 
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( “weteye" ) ,  a  525-lb  boob.  The  525-lb  bomb  la  designed  to  ralaaaa  an 
aaroaol  spray  of  agent  on  datonatlon.  Tha  bombs  ara  atorad  without 
axploslvea.  The  MC-1  bombs  ara  packaged  two  to  a  wooden  pallet  and  tha 
others  In  individual  natal  shipping  containers. 


3.2.5. 


Tanks 


Spray  tanks  contain  VX  agent.  They  ara  designed  for  releasing 
chemical  agent  from  slow-traveling,  low-flying  aircraft.  Tha  apray 
tanks  are  atorad  in  a  natal  overpack  container. 


3.2.6.  Bulk  Agent 


All  three  types  of  agant  are  atorad  in  bulk  as  liquid  in  standard 
oue-ton  steel  containers  (called  ton  containara).  Ion  containers  are 
not  palletized. 


Ton  containers  ara  tha  only  items  stored  at  tha  Aberdeen  Proving 
Ground  (APG)  and  Newport  Army  Ammunition  Plant  (NAAP).  The  ton  con¬ 
tainer  at  APG  contain  Bustard  (HD),  while  NAAP  has  VX-f Hied  ton  con¬ 
tainers.  The  Anniston  Army  Depot  (ANAD)  has  filled  ton  containers. 

Pine  Bluff  Arsenal  (PBA)  has  ouatard-f illed  ton  containers.  Tooele  Army 
Depot  (TEAD)  has  all  types  of  bulk  agent  in  storage.  Umatilla  Depot 
Activity  (UMDA)  has  mustard-filled  ton  containers. 


4.  INITIATING  EVENTS 


This  section  describes  the  approaches  used  to  identify  end  select 
iritieting  events  end  to  assess  or  present  their  occurrence  frequencies 
As  described  in  Section  2,  initiating  events  ere  single  occurrences  or 
individual  malfunctions  that  either  directly  cause  the  release  of  chemi¬ 
cal  agents  or  start  a  aequance  of  avants  teat  could  laad  to  a  release. 
They  ere  classified  as  external  avants  vhen  caured  by  natural  phenomena 
(e.g.,  earthquakes)  or  man-made  intarf erancas  (e.g.,  aircraft  crashes) 
from  outside  the  demilitarisation  cycle.  They  are  clacsified  as  inter¬ 
nal  events  vhen  caused  by  human  error  or  equipment  failure  within  the 
demilitarization  process.  Section  4.1  describes  the  lcgic  used  for 
selection  of  the  initieting  events.  Section  4.1  discusses  the  geueric 
considerations  in  specifying  the  initiating  event  frequency  units  (i.*., 
per  unit  time  or  per  operation).  The  application  of  the  generic  fre¬ 
quency  estimates  to  specific  accident  scenarios  and  locations  is  dis¬ 
cussed  in  the  sections  dealing  with  accident  logic  model  development, 
Sections  5  through  8. 

4.1.  INITIATING  EVENT  IDENTIFICATION  AND  SELECTION 

This  study  used  a  multifaceted  approach  for  identifying  potential 
initiating  events,  screening  out  those  which  (based  on  conservative 
scoping)  should  not  affect  the  overall  risk  and  selecting  those  events 
warranting  further  analysis.  The  approach  consisted  oft 

1.  Developing  e  master  logic  diagram  (MLD) ,  e  logic  tool  described 
in  the  PRA  Procedures  Guide  (Ref.  4-1)  for  systematically 
examining  potential  modes  of  release,  pathways  for  releise. 
barriers  against  release,  end  mitigating  safety  functions 
together  with  roo,  caiu-  (initiators)  of  release. 
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2.  Cross-referencing  results  from  item  1  with  a  list  of  accident 
scenarios  from  safety-related  studies  on  the  chemical  weapons 
disposal  program,  compiled  by  MITRE  Corporation  in  Refs.  4-2 
and  4-3. 

3..  Applying  previous  munitions  risk  study  experience  in  Refs.  4-4 
through  4-12  (the  results  of  these  studies  are  described 
in  Section  1.1). 

4.  Peer  review  by  the  Army  and  independent  consultants  during  the 
early  and  draft  report  phases  of  this  study. 

Two  criteria  were  used  to  screen  accident  scenarios i  (1)  accidents 
with  extremely  low  frequency  (below  10“*®  per  year)  were  eliminated  from 
further  analysis,  and  (2)  those  with  low  consequences  (amount  of  agent 
release  below  0.3  lb  for  GB,  14  lb  for  H  or  0.4  lb  for  VX)  were  also 
screened.  Events  with  frequencies  below  the  cutoff  have  little  meaning 
from  a  practical  standpoint  since  the  expected  times  between  events  is 
measured  on  &  cosmic  scale  rather  than  on  a  scale  of  h>anan  history.  The 
consequence  criteria  pertains  to  the  minimum  release  levels  that  would 
produce  acute  human  fatalities  0.5  km  from  the  incident,  based  on  envi¬ 
ronmental  impact  calculations  performed  by  MITRE  (Refs.  4-2  and  4-3). 

For  bookkeeping  purposes,  a  coding  system  is  used  in  this  report 
to  identify,  organize  and  refer  to  accident  sequences.  Not  ell  accident 
sequences  were  encoded;  those  that  could  be  screened  out  early  because 
of  simple  conservative  scoping  analysis  bear  no  coding.  Conversely, 
many  sequences  that  ware  screened  after  detailed  analysis  retain  their 
coding  but  may  not  be  in  the  final  lists  of  results.  However, 

Appendix  A  contains  a  record  of  all  encoded  sequences. 

Table  4-1  3hcws  the  coding  scheme  followed  for  identification 
of  accident  sequences.  The  coding  system  is  based  on  that  used  in 


TABLE  4-1 

ACCIDENT  SEQUENCE  CODING  SCHEME 

Th«  Accident  Scenario  Identification  la  an  8-Character  Code 
for  the  Form:  XXTZWnnn  aa  Defined  Belov. 


Activity  (XI)  Munition  Type  (?)  A^enc  '  (Z) 


Storage,  long  term 

Rt 

Rockets 

Vi 

VX 

Storage,  handling 

Dt 

Mortars 

for  surveillance 

Ci 

Cartridges 

Gi 

GB 

and  maintenance 

Pi 

Projectiles 

Hi 

HD/HT/H 

Mi 

Mines 

At 

All  to  which  a 

Bi 

Boe&s 

munition  cate¬ 

Xi 

Ton  containers 

gory  applies 

Si 

Spray  tanks 

Ai 

All 

Release  Mode  (V) 


Sequence  No.  (nnn) 


S:  Spill  or  leek  001,  002,  003,  .  999 

C:  Complex  (e.g.,  detonation  with  fire) 

F:  Fire  only 


(*)For  air  transport,  AA  is  for  C-5  and  AB  is  for  C-141  aircraft. 
For  ship  transport,  BI  covers  barge  events;  LI,  LC,  and  LS  are  for 
LASH  events  in  Intercoastal,  coastal  and  high-sea  waters, 
respectively. 


Refs.  4-2  and  4*3.  The  first  two  lsttsrs  identify  ths  demilitarisation 
phase  (SL  for  storage,  long  term,  SH  for  special  hiadliag,  activities). 
The  first  two  letters  together  with  the  sequence  number  at  the  end 
uniquely  identify  an  accident  sequence  of  events.  The  middle  letters 
identify  the  munition/ agent  type  combinations  and  the  release  mode. 
Throughout  this  report,  either  the  entire  coding  is  used  or  eequences 
are  referred  to  by  the  first  two  letters  and  the  sequence  number. 

The  MLD  developed  for  the  risk  study  event  identification  is 
shown  in  Figs.  4-1  through  4-3.  Following  the  FRA  Procedures  Guide 
(Ref.  4-1),  the  top  level  logic  (Fig.  4-1,  level  1)  pertains  to  the 
public  impact,  in  this  case,  fatalities  due  to  exposure  to  chemical 
releases  throughout  the  long-term  storage. 

Figure  4-2  shows  MLD  level  2  (release  mode  or  pathway)  and  subse¬ 
quent  levels  (barriers  to  release,  safety  functions  mitigation/ failure 
and,  finally,  event  initiators)  for  storage.  It  shows  three  modes  for 
release.  One  is  leakage  of  agent  from  corroded  munitions,  such  as 
leakage  of  a  ton  container  stored  in  open  areas.  Another  is  inadvertent 
rupture  of  a  munition  during  maintenance.  The  third  is  a  disruptive 
influence  due  to  an  external  event. 

Subsequent  levels  are  developed  considering  the  types  of  disruptive 
events  that  can  occur,  taking  into  account  information  on  the  potential 
failure  modes  of  the  munitions  (puncture,  detonation,  fire,  etc.),  given 
that  the  event  occurs.  For  illustration,  some  sequences  analyzed  in 
Section  5  are  noted  under  the  initiating  event  boxes.  Table  4-2  summa¬ 
rizes  the  initiating  event  families  for  storage  selected  for  analysis. 

Figure  4-3  shows  the  MLD  levels  2  and  lower  for  handling  opera¬ 
tions.  There  are  modes  of  release:  impact  rupture  due  to  handling 
accidents  (drops  and  forklift  collisions),  and  forklift  tine  puncture. 
Note  that  external  events  are  not  included  here;  external  events  for 
storage  and  transport  consider  the  entire  munitions  inventory  available 
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NOTE:  This  riik  anolytit  IdontifiM  r«l«t«t  of  nfficiant 
mifinitudi  to  couit-ecute  public  fatslitin. 
lowsr  I  ml  ralnies  would  result  in  exposure 
but  ere  not  considered. 


Klg.  4-1.  Maeter  logic  diagram  level  1  (public  impact) 
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Fig.  4-3.  Master  logic  diagram  -  level#  2  (release  pathway)  and 
lower  (barriere,  safety  functions,  aad  initiators). 
Part  B  -  storage  release 


TABLE  4-2 

INITIATING  EVENT  FAMILIES  FOR  STORACE 


INTERNAL  EVENTS 

1.  Munition  drop 

a.  During  lookor  isolation 

l> .  Duo  to  pollot  degradation 

2.  Forklift  tins  punctura  during  lookor  ioolotion 

3.  Look  botwaon  inspections 

EXTERNAL  EVENTS ( * ) 

1.  Flroo  duo  toi 

o.  Spontonoouo  ignition  of  o  rockot 

b.  Flanmable  materials  in  on  Igloo  or  worohouoo 

c.  Lki»  lngrooo  Into  on  Igloo  or  vorohouoo 

d.  Flonmoblo  liquids  noor  o  worohouoo  ot  NAAF 

2.  Meteorite  otrikoo  on  igloo  or  worohouoo 

3.  Tornado  collapse*  o  building  or  generates  a  missile 

4.  Aircraft  crash  duo  toi 

o.  Small  aircraft  (direct) 

b.  Largo  aircraft  (dlroct) 

c.  Largo  aircraft  (Indirect) 

5.  Eorthquoka 

6.  Lightning  otrikoo  outdoor  otoi oga 

(*)Notoi  Extornol  lnltiotoro,  floods,  and  fliee  ata  shown  in 
Section  5  to  bo  low  riek  contributors. 


ragardlat*  of  vhathar  handing  oparation*  ara  in  prograat.  Tha  aub- 
aaquart  laval  Initiating  avanta  conaldar  tha  location  whara  tha  avant 
occur*,  alnca  dlffarant  barrlara  for  ralaaaa  ara  Involved  (a.g.,  if  tha 
avant  occur*  indoors  or  In  an  open  area).  Raaantially,  thara  ara  16 
(3k  3  x  7  aaLrlx)  handling  a-.cldant  combinations .  Thaaa  ara  ralatad 
to  tha  nuatbar  of  auirilr.  Iona  Involved  (a  single  aunltion,  pallat,  or  con¬ 
tainer  )|  tha  ralaaaa  mechanise  (dro;,  forklift  collialon,  or  forklift 
tin*  poftrture/i  and  whathar  tha  ralaaaa  occur*  inaida  or  outdoors. 

7  ahl »  4-3  auu*ii*rita*  tha  fawfll**  or  handling  Initiating  avanta  selected 
for  analyala. 
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TABLE  4-3 

INITIATING  EVENT  FAMILIES  FOR  HANDLING 


1.  Number  of  munitions  involved 

e.  Bere  munition 

b.  Pallet 

c.  Container 

2.  Agent  release  mechanism 

a.  Drop 

b.  Forklift  tine  puncture 

3.  Release  location 

a.  Inside  a  storage  area  or  maintenance  facility 

b.  Outdoors 


4-10 


'  ■ “i 
-  1 


3 

vH 


tA 


0 

**  < 


4.2.  INITIATING  EVENT  FREQUENCIES 


4.2.1.  External  Events 

This  section  presents  the  site-specific  frequencies  of  external 
initiating  events  considered  in  this  study.  Table  4-4  summarizes  the 
results  for  occurrences  at  each  of  the  eight  CONUS  sites.  The  bases  for 
these  results  are  discussed  in  the  folloving  subsections. 

4.2.1. 1.  Earthquakes .  The  frequency  at  which  a  major  earthquake  occurs 
at  a  specific  site  varies  significantly  throughout  the  United  States. 

In  an  attempt  to  quantify  the  seismic  risk  associated  with  a  particular 
site,  the  Seismology  Committee  of  the  Structural  Engineers  Association 
of  California  (SEAOC)  has  divided  the  United  States  into  five  seismic 
zones.  Maps  of  these  seismic  zones  are  presented  in  the  Uniform  Build¬ 
ing  Code  (Ref.  4-13)  and  in  Army  5-809-10  (Ref.  4-14).  Figure  4-4 
presents  the  seismic  zone  map  from  TM  5-809-10,  and  Table  4-5  presents 
the  seismic  zones  indicated  for  each  of  the  storage  sites.  The  proba¬ 
bility  of  seismic  damage  in  each  of  the  zones  is  defined  in  Ref.  4-13  as 
follows : 

Zone  0  -  None  Zone  3  -  Major 

Zone  1  -  Minor  Zone  4  -  Great 

Zone  2  -  Moderate 

The  determination  of  a  seismic  zone  on  a  site  is  based  on  the  his¬ 
tory  of  past  earthquakes  and  the  proximity  of  known  faults.  Appendix  D 
presents  listings  of  the  earthquakes  that  have  occurred  in  the  vicinity 
of  each  of  the  storage  sites.  The  magnitudes  of  the  earthquakes  are 
expressed  as  Modified  Mercalli  Intensities  (MMI).  Table  4-5  presents  a 
summary  of  the  maximum  earthquake  occurring  in  the  vicinity  of  each  of 
the  storage  site3.  The  maximum  earthquake  recorded  at  any  of  the  eight 
storage  sites  is  an  MMI  VIII. 


TABLE  4-4 

SITE  SPECIFIC  FREQUENCIES  OF  EXTERNAL  INITIATING  EVENTS 


•I 
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TABLE  4-5 

MAXIMUM  MODIFIED  MERCALLI  INTENSITIES  (MMI)  IN  THE  VICINITY  OF  EACH  SITE 


Seismic 

MM 

No.  of 

Sit« 

Zone 

Intensity 

Occurrences 

Aberdeen  Proving  Ground  (APG). 

1 

VII 

1 

Pin*  Bluff  Ars*n*l  (PBA) 

1 

VI 

3 

Pu«blo  Depot  Activity  (PUDA) 

1 

VI 

1 

Umatilla  Depot  Activity  (UMDA) 

1 

VII 

1 

Anniston  Army  Depot  (ANAD) 

2 

VII 

1 

Newport  Army  Ammunition  Plant  (NAAP) 

2 

VII 

1 

Lexington- Blue  Grass  Army  Depot  (LBAD) 

2 

VII 

1 

Tooele  Army  Depot  (TEAD) 

3 

mi 

2 

Currently  the  Applied  Technology  Council,  which  ie  associated 
with  the  SEAOC,  ia  developing  new  aeismic  regulations  for  buildings 
(Ref.  4-15).  When  this  work  is  completed,  it  is  expected  to  be  the 
basis  for  future  federal,  state,  and  local  building  codes.  ?art  of  this 
work  was  the  development  of  a  seismic  risk  map  that  divides  the  United 
States  into  seven  seismic  map  areas  similar  to  the  five  seismic  zones 
used  in  Refs.  4-13  and  4-14.  The  seismic  risk  is  approximately  constant 
throughout  a  seismic  map  area. 

Figure  4-5  (from  Ref.  4-15)  presents  a  set  of  curves  that  can  be 
used  to  estimate  the  probabilities  of  earthquakes  of  various  g-levels 
occurring  within  a  particular  seismic  map  area.  The  dashed  portions  of 
the  curves  indicate  possible  extrapolations  to  larger  and  smaller  annual 
probabilities . 

Table  4-6  identifies  the  seismic  map  areas  for  each  of  the  CONUS 
sites  and  tabulates  the  annual  frequencies  of  earthquakes  of  various 
g-levels  being  exceeded  at  the  storage  sites.  The  data  in  Table  4-6 
were  obtained  from  Fig.  4-5.  St r eight- lint ,  logarithmic  extrapolation 
was  n<*ed  to  extrapolate  to  accelerations  beyond  the  curves  shown  in 
Fig.  4-5.  This  method  of  extrapolation  is  believed  to  produce  conserva¬ 
tive  estimates  of  the  probabilities. 

4.2. 1.2.  Wind  Hazards.  Methods  for  estimating  the  frequency  and  inten¬ 
sity  of  extreme  winds  can  be  found  in  ANSI/ANS-2. 3-1983  (Ref.  4-16). 

Tne  discussion  which  follows  is  largely  based  on  the  referenced  nationel 
standard. 

4.2. 1.2.1.  Tornadoes .  A  tornado  is  a  violently  rotating  column  of 
air  whose  circulation  reaches  the  ground.  The  velocity  of  tornadic 
winds  car.  exceed  300  mph.  The  path  of  a  tornado  can  be  more  than  a  mile 
in  width,  but  generally  ranges  from  0.125  to  0.75-mile  wide.  The  path 
width  is  defined  as  the  tornado  diameter  corresponding  to  a  75  mph  wind 
velocity.  The  pith  of  a  tornado  is  seldom  more  than  10  miles  long, 
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TABLE  4-6 

ANNUAL  RISK  OP  EARTHQUAKES 


4-lfc 


ANNUAL  FREQUENCY 


0.1 


0.01 


0.001 


0.0001 


*  0.00001 


Fig. 


0.7 


01.0 

90.0 

95.0 

98.0 

99.3 

99.5 


99.5 


4-5.  Annual  frequency  of  exceeding  various  effective  peak 
accelerations  for  selected  map  areas  defined  by  the 
Applied  Technology  Council  (Ref.  4-15) 


PROBABILITY  THAT  THE  ACCELERATION 
IS  NOT  EXCEEDED  IN  50  YEARS  (K) 


although  extrema  easas  ara  on  raeord  where  tha  atom  path  axtandad  mora 
than  200  alias. 

Mataorological  and  topographic  conditions ,  which  vary  significantly 
from  sits  to  site,  influence  tha  frequency  of  occurrence  and  intensity 
of  tornadoes.  Reference  4-16  presents  three  regionalized  maps  of  tor- 
nadic  wind  speeds  corresponding  to  return  frequencies  of  1  x  10"?,  1  x 
10”® »  and  1  x  10"^  per  year.  These  sups  (Figs.  4-6  through  4-8)  are 
expected  to  bound  the  tornado  intensity  probabilities  at  the  various 
sites  (Ref.  4-16).  A  tabulation  of  maximum  tornado  wind  speed  and 
occurrence  frequency  for  each  of  the  storage  sites  based  on  these 
figures  is  presented  in  Table  4-7. 

4. 2. 1.2. 2.  Tornado-Generated  Missiles.  One  of  the  characteristics  of  a 
tornado  is  its  capability  to  genarata  missiles  from  objects  lying  within 
the  strike  area  and  from  nearby  structural  debris.  The  selection  of 
tornado-generated  missiles  is  dependent  on  the  intensity  of  the  tornado, 
the  number  of  potential  missiles  present,  their  position  relative  to  the 
tornado  path,  and  the  physical  properties  of  the  missiles.  Reference 
4-17  presents  a  spectrum  of  actual  wind-genarated  missiles.  Character¬ 
istics  of  these  missiles  are  listed  in  Table  4-8,  and  expected  windborne 
missile  velocities  are  listed  in  Table  4-9. 

4.2. 1.2.3.  Other  Extreme  Winds.  The  approach  used  for  the  determina¬ 
tion  of  extreme  wind  speed  (other  than  tornado)  including  hurricane 
winds  is  the  method  suggested  by  Science  Applications  International 
Corporation  (SAIC)  (Ref.  4-12)  using  a  basic  wind  speed  as  defined  in 
Ref.  4-16.  A  frequency  of  occurrence  of  0.02  per  year  is  associated 
with  a  basic  wind  speed  of  70  mph.  SAIC  concluded  that  the  basic  wind 
speed  was  applicable  to  all  of  the  sites  that  store  M55  rockets.  Lack¬ 
ing  site-specific  meteorological  data,  it  is  assumed  that  the  basic  wind 
speed  is  applicable  to  the  other  sites  as  well. 

In  order  to  estimate  the  frequency  of  recurrence  of  winds  of  veloc¬ 
ity  greater  than  the  basic  wind  speed,  but  less  than  the  tornado  wind 
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TABLE  4-7 

TORNADO  WIND  SPEEDS  AND  PROBABILITY  OP  RECURRENCE 
FOR  CHEMICAL  STORAGE  SITES 


Sis* 

Probability  of 
(Wind 

Occur ranca 
Spaad  (mph) 

Par  Yaar 

) 

1  x  10' 

•  5 

1 

x  10’6  1 

x  10'7 

AN  AD 

(Anniston,  Ala.) 

200 

260 

320 

LEAD 

(L«xlngton,  Ky.) 

200 

260 

320 

UMDA 

(Umatilla,  Orag.) 

100 

140 

ISO 

PBA 

(Pin*  Bluff,  Ark. ) 

200 

260 

320 

TEAD 

(Too*la,  Utah) 

100 

140 

160 

PUDA 

(Puablo,  Colo.) 

150 

200 

250 

NAAP 

(N*vrport,  Ind.) 

200 

260 

120 

APO 

(Ab*rd«*n,  Hd.) 

150 

200 

2r>o 
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TABLE  4-9 

WINEBOWL  MISSILE  VELOCITIES**) 


Horizontal  Miaeile  Valocity*^1)  (mph) 


Maximum 

Height 


Z1 

Deulgn  Wind  Speed 

100 

150 

200 

250 

300 

350 

(ft) 

limber  plank 

60 

72 

90 

100 

125 

175 

200 

3*  ir. .  -diam 

40 

50 

65 

85 

110 

140 

100 

m  ’ 

r  1 

e 

i 

standard  pip* 

• 

>* 

y 

f. 

i 

' . 

* 

.  / 

Utility  pole 

<c) 

<c) 

<c) 

80 

100 

130 

30 

hutoinob  lie 

<c) 

(c) 

<e) 

25 

45 

70 

30 

.  « 

<*)Sourc«i  Ref. 

4-17. 

y 

(^)Vertical  velocities 

are  taken 

as  two. 

•thirds 

the 

horizontal 

nieelle  velocity.  Horizontal  and  vertical  valocltiaa  should  not  be 
combined  Vact or  1  ally . 

(c)fll»all.«i  will  not  ha  picked  up  or  aueteined  by  the  windj  however, 
for  this  enalyeie,  any  initial  miaaila  velocity  of  80  mph  or  less  we* 
aeeigned  a  wind  velocity  of  230  wph. 
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VV 
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speed,  the  following  approach  was  taken.  The  tornado  strength  end  fre¬ 
quency  data,  and  the  basic  wind  strength  end  frequency  data  were  plotted 
on  a  scale  of  log  probability  versus  wind  strength.  The  results  are 
shown  in  Figs.  4-'i  through  4-11  for  the  three  tornado  regions  of  the 
United  States  as  given  in  Ref.  4-16.  A  conservative  approach  to  inter¬ 
polating  between  the  available  data  points  is  the  bilinear  approximation 
shown  by  the  solid  lines  in  the  figures.  With  these  figures,  the  proba¬ 
bility  of  a  given  wind  velocity  occurring  at  any  of  the  chemical  storage 
sites  can  be  estimated. 

4. 2. 1.3.  Aircraft  Operations.  Much  of  the  data  in  this  section  were 
taken  from  the  SA1C  report  (Ref.  4-12)  and  NURZG-0800  (Ref.  4-18). 

There  are  three  major  concerns  in  assessing  potential  hazards  due 
to  aircraft  operations: 

1.  Proximity  c£  aircraft  operations  to  munitions  areas. 

2.  The  frequency  of  aircraft  flights. 

3.  The  characteristics  of  the  aircraft  traffic. 

The  proximity  of  aircraft  operations  to  munitions  activities  is  an 
important  consideration  in  that  approximately  50Z  of  aircraft  accidents 
that  result  in  fatalities  or  destroy  aircraft  occur  within  5  miles  of 
airports  (Ref.  4-12).  Also,  the  close  proximity  of  flight  paths  to 
munitions  activities  in- reaaes  tbe  likelihood  of  these  areas  receiving 
falling  debris  ficm  aircraft  accidents.  The  frequency  of  flight  activ¬ 
ity  increased  the  possibility  of  damaga  to  munitions  by  increasing  the 
overall  1 Lkcllhuod  of  an  aircraft  accident. 
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Per  the  recommendations  of  NUREG-080G  (Ref.  4-18) ,  the  probability 
of  an  aircraft  crash  can  be  considered  small  if  the  distance  to  the  site 
meets  the  following  requirements: 

1.  The  aite-to-airport  distance  (D)  is  between  5  and  10  statute 
miles,  and  the  projected  annual  number  of  flight  operations  is 
less  than  500  D^,  or  the  site-to-airport  distance  is  greater 
than  10  statute  miles,  and  the  projected  annual  number  of 
operations  is  less  than  1000  D^. 

2.  The  site  is  at  least  5  statute  miles  from  the  edge  of  military 
training  routes,  including  low-level  training  routes,  except 
those  associated  with  a  usage  greater  than  1000  flights  per 
year,  or  where  activities  may  create  an  unusual  stress 
situation. 

3.  The  site  is  at  least  2  statute  miles  beyond  the  nearest  edge  of 
a  federal  airway,  holding  pattern,  or  approach  pattern. 

The  characteristics  of  an  aircraft,  such  as  its  weight,  number  of 
engines,  etc.,  are  important  in  determining  the  energy  of  potential  mis¬ 
siles  generated  in  an  aircraft  accident,  and  depending  on  the  structure 
they  hit,  the  magnitude  of  the  damage  they  may  cause. 

The  frequency  of  an  aircroft  crashing  while  in  an  airway  can  be 
computed  as  follows  (Ref.  4-18): 

?FA  •  C  x  N  x  A/W  ,  (4-1) 

where  C  -  inflight  crash  rate  per  mile  for  aircraft  using  airway, 

W  ■  width  of  airway  (plus  twice  the  distance  from  the  airway  edge 
to  the  site  when  the  site  is  outside  the  airway)  in  miles, 

A  "  effective  area  of  facility  in  square  miles, 

N  “  number  of  flights  per  year  along  the  alxway. 


For  consnercial  aircraft,  a  value  for  C  of  1  x  10”^f  has  been  used 
(Ref.  4-12).  For  military  lircraft,  C  la  estimated  to  be  five  times 
the  value  for  commercial  flights  (Ref.  4-12).  For  general  aviation, 

C  was  estimated  to  be  the  same  aa  for  military  aircraft. 

The  frequency  of  an  aircraft  crashing  in  the  vicinity  of  an  airport 
or  heliport  can  be  computed  as  follows  (Ref.  4-18): 


L  M 

PA  “  S  CJ  AJ  ’  (4~2) 

J-l  j-1 


where  L 
M 

Cj 

AJ 


number  of  flight  trajectories  affecting  che  target, 

number  of  different  flights  using  the  airport, 

probability  per  square  mile  of  a  crash  per  aircraft  movement 
for  Jth  aircraft, 

number  per  year  of  movements  by  the  Jfch  aircraft, 
effective  target  area  in  square  miles  for  the  aircraft. 


The  values  for  Cj  which  were  used  in  the  analysis  are  listed  in 
Table  4-10.  The  total  crash  probability  is  the  sum  of  *nd  I*A‘ 


The  Federal  Aviation  Administration  (FAA)  does  not  monitor  the 
number  of  certain  types  of  aircraft  that  fly  the  high  end  low  eltitude 
airways.  Consequently,  the  air  traffic  was  estimated.  Since  air  traf¬ 
fic  is  not  the  same  on  all  airways,  the  airways  are  divided  into  five 
categories  with  regard  to  air  traffic:  very  low,  low,  medium,  high,  and 
very  high.  Table  4-11  presents  estimates  of  the  air  traffic  on  each  of 
these  airways.  Each  airway  was  assigned  to  one  of  these  categories 
besed  on  the  treffic  expected  between  the  cities  that  the  airway  con¬ 
nects.  If  there  ere  no  low  eltitude  airways  near  a  sita,  it  is  assumed 
that  the  air  traffic  over  the  site  is  at  laast  equal  to  that  for  a  very 
low  air  traffic  airway. 
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Probability  (x  10®)  of  a  Fatal  Crash  per  Square 

_  Mile  per  Aircraft  Movement 

Distance  From  - , - - - 

End  of  Runway  Commercial  General  Aviation  Military  Helicopters 


TABLE  4-11 

ASSUMED  DISTRIBUTION  OF  AIR  TRAFFIC^) 


Aircraft 

Very 

Low 

Low 

Medium 

High 

Very 

High 

High  Altitude  Jet  Routes 

Large  commercial 

1,000 

2,000 

5,000 

10,000 

20,000 

Large  military 

500 

1,000 

2,500 

5,000 

10,000 

Large  general  aviation 

500 

1,000 

2,500 

5,000 

10,000 

Total 

2,000 

4,000 

10,000 

20,000 

40,000 

Low  Altitude  Airways 

Large  commercial 

400 

800 

2,000 

4,000 

8,000 

Large  military 

240 

480 

1,200 

2,400 

4,800 

Large  general  aviation 

400 

800 

2,000 

4,000 

8,000 

Small  general  aviation 

6,960 

13,920 

34,800 

69,600 

139,200 

Total 

8,000 

16,000 

40,000 

80,000 

160,000 

(^Flights  per  year. 

^k)jhe  number  of  smell  consnercial  and  smell  military  flights  is 
assumed  to  be  small  compared  to  other  types  of  flights. 
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Appendix  C  presents  tables  which  summarize  the  input  data  that  were 
used  to  calculate  the  annual  frequencies  of  both  email  and  large  air¬ 
craft  crashes  at  each  of  the  eight  sites.  The  frequencies  were  computed 
using  the  equations  given  above.  The  annual  frequencies  for  ell  the 
sites  and  for  large  and  small  aircraft  and  helicopters  are  summarized  in 
Table  4-12. 

A  major  source  of  air  crashes  is  the  proximity  of  airports  and 
heliports.  This  is  of  particular  concern  at  APG,  PBA,  and  PUDA.  The 
sir  traffic  for  the  APG  analysis  was  supplied  by  FEO-PM  Cml  Demil 
(Ref.  4-19).  The  helicopter  air  traffic  at  PBA  was  estimated  by  SAIC 
(Ref.  4-12).  The  air  traffic  at  PUDA  was  based  on  data  collected  at 
Pueblo  Memorial  Airport  and  communicated  to  GA  by  telephone.  The  heli¬ 
copter  traffic  at  TEAD  is  light  and  was  assumed  to  be  15  flights  per 
month. 

The  annual  frequency  of  a  crash  into  a  specific  facility  is  com¬ 
puted  by  multiplying  the  appropriate  frequency  taken  from  Table  4-12  by 
the  effective  target  area  of  the  facility  (see  Appendix  C). 

4. 2. 1.4.  Meteorites .  The  frequency  of  meteorite  strikes  for  meteorites 
1.0  lb  or  greater  is  4.3  x  10"^/ft2  (Ref.  4-20).  For  small  ::eteorites 
(a  ton  or  less),  stone  meteorites  are  approximately  ten  times  more 
common  than  iron  meteorites  (Ref.  4-21).  However,  iron  meteorites  are 
more  dense  and  tend  to  have  higher  impact  velocities,  and  consequently, 
represent  a  significant  portion  of  the  total  meteorites  that  can  rupture 
munitions.  Table  4-13  shows  the  size  distribution  of  striking  meteor¬ 
ites  for  both  iron  and  stone  meteorites.  The  table  was  compiled  from 
the  data  presented  in  Refs.  4-20  and  4-21. 
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TABLE  4-12 

SUMMARY  OF  AIRCRAFT  CRASH  PROBABILITIES 
(Crashes /Square-Mile/Year) 


Large  Small 

Sice  Aircraft  Aircraft  Helicopters 


APG 

5.3 

X 

10“7 

1.1 

X 

10-3 

6.7  x  lO”3 

AN  AD 

7.9 

X 

10*6 

1.2 

X 

1 

O 

H 

N/A 

LBAD 

4.5 

X 

10“6 

1.8 

X 

lO"7 

N/A 

NAAP 

4.6 

X 

10“6 

2.3 

X 

10-5 

N/A 

PBA 

1.5 

X 

10“6 

1.8 

X 

1C“7 

1.1  x  10-A 

PUDA 

5.9 

X 

M 

o 

1 

\J% 

1.0 

X 

10_A 

N/A 

TEAD 

3.6 

X 

10~7 

3.5 

X 

10-6 

1.1  x  lO"5 

UMDA 

1.5 

X 

10-5 

1.2 

X 

10-5 

N/A 

^  . 
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TABLE  4-13 

SIZE  DISTRIBUTION  OK  METEORITES  WHICH  ARE  ONE  POUND  OR  LARGER<&) 
Weight 


Greater 

Than  Stone  Iron  All 


(lb) 

Meteorites^ ) 

Meteorites (^) 

Meteorites (k) 

1 

0.9 

0.1 

1.0 

2 

0.3 

3  x  IQ-2 

0.3 

20 

0.1 

CM 

• 

o 

*— 4 

M 

-r-9 

0.1 

200 

3  x  IQ*2 

3  x  10*3 

3  x  10-2 

2,000 

2  x  10*3 

2  x  10-4 

2  x  IQ'3 

20,000 

3  x  10*4 

3  x  10‘5 

1 

o 

H 

X 

CO 

(®)Data  compiled  from  Refs.  4-9  end  4-10. 

(b)Fraction  of  total  number  of  meteorites  1.0  lb  or  greater. 
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4.2.2 


Internal  Events 


Table  4-14  summarizes  the  internal  initiating  events  for  the  con¬ 
tinued  storage  option.  Also  summarized  in  the  table  are  the  event 
occurrence  frequencies.  The  bases  for  these  frequencies  are  discussed 
in  Section  5  and  are  not  repeated  here. 
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TABLE  4-14 

LIST  OF  INTERNAL  INITIATING  EVENTS  AND  FREQUENCIES 


Event 

— 

A 

Frequency 

Clothing  Level 

C 

F 

STORAGE /HANDLING  EVENTS  (per  operation) 

1.  Munition  drop  from  CHE  (bulk  3  x 

10-5 

1.5  x  10-6 

3  x 

10*6 

2. 

containers ) 

Munition  drop  from  forklift 

3  x 

'T 

l 

O 

H 

1.5  x  10-5 

3  x 

icr5 

3. 

(pallets  or  ST  in  overpacks) 

Munition  drop  from  hand 

6  x 

10-* 

U 

W 

H 

o 

1 

6  x 

lO"5 

4. 

(single  units) 

Forklift  tine  accident 

1  X 

H 

o 

1 

5  x  lO-5 

1  x 

lO-5 

5. 

Forklift,  or  CHE  collision 

4.3 

x  10- 

6  4.3  x  10“6 

4.3 

x  10~6 

6. 

Leak  between  inspections 
(stored  pallets) 

Munition 

dependent 
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5.  SCENARIO  LOGIC  MODELS  FOR  STORAGE 


5.1.  SEQUENCE  LIST  AND  EVENT  TREES 

The  accident  scenarios  involving  the  interim  storage  of  chemical 
munitions  were  categorized  as  follows: 

1.  External  event-induced  agent  releases  (e.g.,  earthquakes,  air 
craft  crashes,  etc.). 

2.  Releases  due  to  leakage  of  munitions  while  in  storage. 

3.  Releases  from  accidents  that  could  occur  during  the  isolation 
of  leaking  munitions  while  in  storage. 

4.  Releases  from  accidents  related  to  tbe  handling  of  munitions 
during  maintenance  and  surveillance. 

For  the  first  category  (i.e.,  external  events),  the  selection  pro¬ 
cess  described  in  Section  4.1  identified  six  initiating  event  families. 
These  are  discussed  in  Section  5.2.  For  the  other  categories  (i.e., 
internal  initiating  events),  there  is  one  initiating  event  family  for 
each  category.  A  total  of  nine  initiating  event  families  resulted,  as 
listed  in  Table  4-2.  For  each  family,  there  ware  one  or  more  specific 
sequences  which  were  analyzed.  Table  5-1  presents  the  list  of  accident 
sequences  identified  and  evaluated  for  the  continued  storage  option. 
Table  5-2  lists  the  sequences  screened  and  gives  the  basis  for  the 
screening . 

The  event  tree  models  are  shown  in  Figs.  5-1  through  5-5.  They 
will  be  discussed  in  the  following  sections  by  initiating  event 


TABLE  5-1 

MASTER  LIST  OF  STORAGE  ACCIDENTS 


Event 

SL1 

SL2 

SL3 

SLA 

SL5 

SL6 

SL7 

SL8 

5L9 

SL10 
SLi  1 
SL12 
SL13 

SL14 

SL15 


ID 


Description 


Munition  develops  e  leek  between  Inspections. 

Munition  punctured  by  forklift  tine  during  leeker-hsndling 
ectlvities . 

Spontsneous  Ignition  of  rocket  during  storage. 

Large  aircraft  direct  crash  onto  storage  area;  fire  not  con¬ 
tained  in  30  min.  (Note:  Assume  detonation  occurs  if  burst- 
ered  munitions  hit;  fire  Involving  burstered  munitions  not 
contained  at  all.) 

Large  aircraft  indirect  crash  onto  storage  area;  fire  not  con¬ 
tained  in  30  min.  (See  note  in  SLA.) 

Tornado-generated  missiles  strike  the  storage  magazine,  ware¬ 
house,  or  open  storage  area;  munitions  breached  (no  detona¬ 
tion)  . 

Severe  earthquake  breaches  the  munitions  in  storage  igloos;  no 
detonations . 

Meteorite  strikes  the  storage  area;  fire  occurs;  munitions 
breached  (if  burstered,  detonation  also  occurs). 

Munition  dropped  during  leaker  isolation  operation;  munition 
punctured , 

Storage  igloo  or  warehouse  fire  from  internal  sources.^®) 

Munitions  are  dropped  due  to  pallet  degradation. ( 

Liquefied  propane  ges  (LFG)  lnfiltretes  igloo/building. 

Flemneble  liquids  stored  in  nesrby  facilities  explode;  fire 
propegetes  to  munition  warehouse  (applies  to  NAAP).(ft) 

Tornado-induced  building  collapse  leads  to  breaching/ 
detonation  of  munitions ) 

Small  aircraft  direct  crash  onto  warehouse  or  open  storage 
yard;  fire  occurs;  not  contained  in  30  min. 


(•^Screened  out  for  the  reasons  stated  in  Table  5-2. 


TASLE  5-1  (Continued) 


w 


Event  ID 


Description 


SL16  Large  aircraft  direct  crash;  no  fire;  detonation  (if  burat- 
ered) . 

SL17  Large  aircraft  direct  crash;  fire  contained  within  30  min 
(applies  to  nonburstered  munitions  only). 

SL18  Small  aircraft  direct  crash  onto  warehouse  or  open  storage 
yard;  no  fire. 

SL19  Small  aircraft  direct  crash  onto  warehouse  or  open  storage 
yard;  fire  contained  in  30  min. 

SL20  Large  aircraft  indirect  crash  onto  storage  area;  no  fire. 

SL21  Large  aircraft  indirect  crash  onto  storage  area;  fire  con¬ 

tained  in  30  min. 

SL22  Severe  earthquake  leads  to  munition  detonation. 

SL23  Tornado-generated  missiles  strike  the  storage  igloo  and  Jeadi, 
to  munition  detonation. 

SL24  Lightning  strikes  ton  containers  stored  outdoors. 

SL25  Munition  dropped  during  leaker  isolation;  munition  detonates. 

SL261  Earthquake  occurs;  NAAP  warehouse  is  intact;  no  ton  containers 
damaged;  fire  occurs. 

SL262  Earthquake  occurs;  NAAP  warehouse  is  intact;  ton  container 
damaged;  no  fire. 

SL263  Earthquake  occurs;  NAA?  warehouse  is  ir.tact;  ton  container 
damaged;  fire  occurs. 

SL264  Esr thquske  occurs;  NAA?  warehouse  is  damaged;  ton  containers 
damaged;  no  fire. 

SL265  Earthquake  occurs;  NAAP  warehouse  is  damaged;  ton  containers 
damaged;  fire  occurs. 

SL271  Earthquake  occurs;  TFAD  warehouses  intact;  aunitions  intact; 
fire  occurs  at  one  warehouse. 

SL272  Earthquake  occurs;  TEAD  warehouses  intact;  munitions  intact; 
fire  occurs  at  two  warehouses. 


•r**M*<*  v  vvw  v  vv»y>srT..'  /< >; 


TABLE  5-1  (Continued) 


Event  ID  Description 

SL273  Eerthqueke  occurs;  one  TEAD  warehouse  is  damaged;  munitions 
intact;  fira  occurs  at  one  warehouse. 

SL274  Earthquake  occurs;  one  TEAD  warehouse  is  damaged;  munitions 
intact;  fire  occurs  at  two  warehouses. 

SL275  Earthquake  occurs;  two  TEAD  warehouses  damaged;  munitions 
intact;  fire  occurs  at  one  warehouse. 

SL276  Earthquake  occurs;  two  TEAD  warehouses  damaged;  munitions 
intact;  fire  occurs  at  two  warehouses. 

SL281  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  intact; 
fire  occurs  at  one  warehouse. 

SL282  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  intact; 
fire  occurs  at  two  warehouses. 

SL283  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  one 
warehouse  damaged;  no  fire  occurs. 

SL284  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  one 
warehouse  damaged;  fire  occurs  at  warehouse  with  damaged 
munitions. 

SL285  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  one 
warehouse  damaged;  fire  occurs  at  warehouse  with  undamaged 
munitions. 

SL286  Earthquake  occurs;  UMDA  warehouses  intset;  munitions  in  one 
warehouse  damaged;  fire  occurs  at  two  warehouses. 

SL287  Earthquake  occurs;  UMDA  wmrshousas  intact;  munitions  in  two 
warehouses  damaged;  no  fire  occurs. 

SL288  Eerthqueke  occurs;  UMDA  warehouses  intact;  munitions  in  two 
warahousas  dsmagad;  fire  occurs  at  warahousc  with  damaged 
munitions . 

SL289  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  two 
warehouses  damaged;  fire  occurs  st  two  -arehouses. 

SL2810  Earthquake  occurs;  one  UMDA  warehouse  imaged;  munitions  in 
on*  warehouse  damaged;  no  fira  occurs. 


TABLE  5-1  (Continued) 


Event  ID  Description 

SL2811  Earthquake  occurs;  one  UMDA  warehouse  damaged;  munitions  in 
one  warehouse  damaged;  fire  occurs  at  warehouse  with  damaged 
minitions . 

SL2812  Earthquake  occurs;  one  UMDA  warehouse  damaged;  munitions  in 
one  warehouse  damaged;  fire  occurs  at  two  warehouses. 

SL2813  Earthquake  occurs;  one  UMDA  warehouse  damaged;  munitions  in 
two  warehouses  damaged;  no  fire  occurs. 

SL2814  Earthquake  occurs;  one  UMDA  warehouse  damaged;  munitions  in 
two  warehouses  damaged;  fire  occurs  warehouse  with  damaged 
munitions . 

SL2815  Earthquake  occurs;  one  UMDA  warehouse  damaged;  munitions  in 
two  warehouses  damaged;  fire  occurs  at  two  warehouses. 

SL2816  Earthquake  occurs;  two  UMDA  warehouses  damaged;  munitions  in 
two  warehouses  damaged;  no  fire  occurs. 

SL28i7  Earthquake  occurs;  two  UMDA  warehouses  damaged;  munitions  in 
two  warehouses  damaged;  fire  occurs  at  both  warehouses. 
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Fig.  5-1.  Agent  release  indicated  by  tornado-generated  missiles 
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Fig.  5-5.  Earthquake- induced  agent  releases  involving  inanitions  in 
storage  igloos 


category.  In  these  event  trees,  NR  refers  to  no  release  of  agent,  and  F 
and  C  mean  that  the  sequence  was  screened  on  the  basis  of  low  frequency 
or  low  consequence,  respectively. 
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5.2.  EXTERNAL  EVENTS  \AA 

A 

Th«  extaroal  evants  that  war*  *v*lu*t*d  includes 

*  Tornadoes  and  high  winds . 

*  Meteorite  strikes. 

*  Aircraft  crashes. 

*  Earthquakes. 

*  Lightnings. 

*  Floods. 

In  general,  the  amount  of  agent  released  to  the  atmosphere  from 
accidents  induced  by  such  events  depends  on  the  extent  of  damage 
incurred  to  the  building  structure  and  the  munition  itself.  The  muni¬ 
tions  are  currently  stored  in  igloos,  warehouses,  or  open  storage  yards. 

Section  3  discusses  the  types  of  storage  structures  present  at  each 

CONUS  site,  as  well  as  the  kinds  of  munitions  stored. 

L 

5.2.1.  Tornadoes  and  High  Winds 

The  accident  scenarios  identified  involve  the  breaching  of  the 
munitions  in  the  storage  facilities  (i.e.,  igloos,  warehouses,  or  open 
yardr)  by  tornado-  or  high-wind-generated  missiles.  This  failure  mode 
was  determined  to  be  more  credible  than  that  identified  in  sequence 
SL1 A ,  which  is  a  tornado/high-wind-induced  building  collapse  that  could 
lead  to  the  crushing  of  munitions  by  the  felling  structure.  For  UBC- 
designed  structures  such  as  a  warehouse,  the  wind  loads  will  fail  the 
walls  of  the  structure  before  the  structure  will  collapse.  Storage 
igloos  have  been  designed  to  resist  the  direct  effects  of  tornadoes  with 
winds  up  to  320  mph  except  for  the  possibility  of  missiles  breaching  the 
igloo  doors  (Ref.  5-1).  For  the  above  reasons,  sequence  SL14  has  been 
screened  out  from  further  analysis. 
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The  event  trta  developed  to  define  relevant  accident  sequencer  is 
shown  in  Fig.  5-1.  Neither  of  the  accident  aequenees  (SL6  and  SL23) 
could  be  screened  out  initially  as  more  detailed  quantitative  analysis 
is  required  to  determine  the  necessary  wind  velocity  to  generate  mis¬ 
siles  which  could  penetrate  the  munitions.  Hence,  both  accident 
sequences  shown  in  the  event  trees  were  quantified. 


Essentially,  the  missile  penetration  of  the  munition  occurs  if 

(1)  a  tornado  or  extremely  high  wind  occurs  with  a  velocity  sufficient 
to  generate  a  missile  that  could  penetrate  the  igloo  door,  warehouse 
wall,  or  transportation  container  wall,  and  the  munition  itself;  and 

(2)  the  missile  actually  hits  the  target  munition. 


o: 


The  probability  of  a  missile  hitting  and  rupturing  a  munition  is 
the  product  of  four  variables:  (1)  the  probability  that  the  velocity 
vector  of  the  missile  is  nearly  perpendicular  to  the  target;  (2)  the 
probability  thar.  the  missile  is  oriented  properly  to  penetrate  the  tar¬ 
get;  (3)  the  number  of  missiles  per  square  foot  of  wind;  and  (4)  the 
target  area.  More  details  on  the  derivation  of  these  variables  are 
provided  in  Appendix  C  and  Ref.  5-2. 
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If  the  missile  hits  a  burstered  munition,  two  failure  modes  are 
possible:  (1)  the  munition  is  opened  up  due  to  puncture  or  crush,  or 

(2)  the  missile  impact  causes  munition  detonation  due  to  the  application 
of  a  force  greater  than  the  "undue  force."  The  undue  force  is  defined 
as  "a  force  greater  than  that  generally  required  to  a'semble  the  muni¬ 
tion"  or  as  "any  force  which  could  cause  deformation  to  the  munition 
(other  than  minor  surface  deformation)  or  damage  to  the  explosive  train" 
(Ref.  5-3). 


5. 2. 1.1.  Storage  Magazines.  The  analysis  of  the  vulnerability  of  the 
igloo  door  to  the  tornado-generated  miss'*  le  considered  the  two  types  of 
igloo  doors  present  at  the  CONUS  sites,  i.e.,  steel  and  concrete.  PDA 
and  TEAD  have  igloos  with  either  steel  or  concrete  doors,  while  the 
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igloos  st  ANAD,  LBAD,  PUDA,  and  UMDA  have  st««l  doors  only.  For  con- 
aervatiam,  all  igloos  at  PBA  and  TEAO  ware  assumed  to  have  concrete 
igloo  doors. 

The  steel  doors  require  a  missile  velocity  of  94  mph  for  penetra¬ 
tion  by  a  3-in.  steel  pipe  or  66  uph  for  penetration  by  a  utility  pole, 
for  the  concrete  doors,  the  penetration  velocity  for  a  3-in.  steel  pipe 
is  66  mph  and  for  the  utility  pole,  34  oph.  After  penetrating  the  door, 
thf.  remaining  missile  velocity  must  be  large  enough  to  rupture  the  muni¬ 
tion.  The  formula  for  the  required  Initial  missile  velocity  is  as 
fellows : 


Vi  -  vj  ♦  vi  ,  (5-1) 

where  Vj  •  required  initial  velocity , 

■  required  velocity  to  penetrate  the  door, 

Vm  ■  required  velocity  to  rupture  the  mmition. 

In  order  for  a  missile  to  reach  the  velocity  required  to  penetrate 
the  igloo  door  and  the  munitions  inside,  a  wind  with  a  significantly 
higher  velocity  is  required.  Table  5-3  presents  the  relationship 
between  wind  velocity  and  missile  velocity. 

The  frequency  of  a  wind-generated  missile  penetrating  an  igloo  and 
a  munition  inside  the  igloo,  is  the  product  of  the  following: 

1.  The  frequency  of  a  tornado  or  wind  which  has  sufficient 

velocity  to  generate  s  missile  that  can  penetrate  the  igloo 
and  munition. 
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TABLE  5-3 

WINDBORNE  MISSILE  VELOCITIES (») 


Hot 

izontal 

Missile  Velocity(k) 
(mph) 

Maximum  Height 
(ft) 

Design  Wind  Speed 

100 

150 

200 

250 

300 

350 

Timber  plank 

60 

72 

90 

100 

125 

175 

200 

Three -inch- diameter 
standard  pipe 

40 

50 

65 

85 

110 

140 

100 

Utility  pole 

(c) 

(c) 

(c) 

80 

100 

130 

30 

Automobile 

(c) 

(c) 

(c) 

25 

45 

70 

30 

(*)Sourc«:  Ref.  5-4. 


(^ )  Ve  rtical  velocities  ere  taken  as  2/3  the  horizontal  missile  veloc¬ 
ity.  Horizontal  and  vertical  velocities  should  not  be  combined 
vectorially. 

(c)liissile  will  not  be  picked  up  or  sustained  by  the  wind;  however, 
for  this  analysis,  any  initial  missile  velocity  of  80  mph  or  less  was 
assigned  a  wind  velocity  or  250  mph. 
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2.  The  probability  of  a  miaaila  penetrating  tha  igloo  and  hitting 
the  munition  in  such  a  way  as  to  causa  damage  and  ia  calcu¬ 
lated  as  follows: 

Pp  •  P^  x  cq  r  Dt  x  i  (5-2) 

where  P^  »  probability  that  tha  velocity  of  tha  miaaila  la 
nearly  perpendicular  to  tha  target  plane, 

PQ  •  probability  that  tha  miaaila  la  oriented  to  pene¬ 
trate  tha  target  (i.s.,  miaaila  not  tumbling  or 
going  aideways), 

Dc  -  density  of  number  of  miaailea  per  square  foot  of 
wind, 

Aj.  ■  target  area. 

Details  on  the  calculation  of  these  variables  are  given  in 
Ref.  5-2. 

The  site-specific  tornado  frequency  versus  velocity  curves  has 
been  presented  in  Section  4.  Two  types  of  missiles  were  Initially  con¬ 
sidered:  (1)  a  3-in.  pipe  and  (2)  a  utility  pole.  For  all  munition 

types,  it  was  found  that  the  utility  pole  had  a  higher  probability  of 
penetrating  munitions. 

Tables  5-4  and  5-5  present  the  wind  velocities  required  to  generate 
missiles  which  have  sufficient  velocity  to  penetrate  the  igloo  door  and 
the  various  munitions  stored  inside.  Table  5-6  presents  the  annual  fre¬ 
quencies  of  these  winds  occurring  at  each  of  the  sites  that  have  igloos. 
The  frequencies  were  read  from  the  curves  presented  in  Figs.  4-9  through 
4-11.  The  conditional  probability  of  a  missile  hitting  the  igloo  door 
end  the  munitions  stored  inside  is  3.2  x  10*^  (see  Appendix  C) . 
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TABLE  5-6 

FREQUENCE  OF  A  WIND  HAZARD  SUFFICIENT  TO  BREACH 
MUNITIONS  IN  STORAGE  MAGAZINES<*> 

(Per  Year) 


AN  AD 

LB  AD 

PBA(b> 

PUDA 

tead(M 

UMDA 

Certridges  end  morters 

1.5E-6 

— 

— 

1.0E-7 

1.8E-9 

Projectiles 

1.5E-6 

1.5E-6 

-- 

1.0E-7 

1.8E-9 

1-8E-9 

Mines 

1.5E-6 

— 

2.6E-6 

-- 

4.2E-9 

1.8E-9 

Rockets 

1.5E-6 

1.5E-6 

6.1E-6 

— 

1.5E-8 

1.8E-8 

Ton  containers 

3.8E-7 

— 

-- 

— 

7.5E-10 

2.4E-10 

Bombs 

-- 

— 

— 

— 

1.1E-9 

3.6E-10 

Sprey  tanks 

-- 

-- 

— 

-- 

-- 

1.1E-9 

(^Frequencies  obtained  from  the  curves  presented  in  Figs.  4-9 
through  4-11. 

(b)Concrete  doors. 
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5.2. 1.2.  Warehouses . 


The  warehouses  at  TEAD  ace  designed  for  100-mph 
wind  loads  (Ref.  5-1).  Assuming  that  the  warehouses  at  NAAP  and  UMDA 
are  designed  to  the  UBC  requirements,  they  should  be  designed  for  at 
least  70  mph  winds.  An  analysis  of  the  UBC  requirements  shows  that 
winds  will  fail  the  walls  of  UBC  designad  structures  before  the  frame  of 
the  structure  will  fail.  Based  on  the  margins  of  safety  required  by  the 
UBC,  the  concrete  walls  of  the  warehouses  at  TEAD  are  not  expected  to  be 
breached  by  winds  less  than  160  mph.  Breaching  of  the  concrete  walls  is 
expected  to  involve  cracking  and  spalling  of  the  concrete  and  the  possi¬ 
bility  of  the  wall  partially  separating  from  the  frame.  The  sheet  metal 
walls  of  the  warehouses  at  NAAP  and  UMDA  are  expected  to  be  blown  away 
by  115-mph  winds.  Neither  of  these  failures  are  expected  to  damage  the 
bulk  containers. 


In  order  for  a  wind  blown  missile  to  penetrate  a  spray  tank  in  a 
warehouse  at  TEAD,  it  must  pass  through  the  6-in.  concrete  wall,  the 
spray  tank  overpack,  and  finally  the  spray  tank  itself.  This  would 
require  a  283-mph  wind. 


A  250-mph  wind  can  generate  a  missile  that  will  penetrate  an  unpro¬ 
tected  ton  container.  Since  a  115-mph  wind  is  expected  to  blow  away  the 
walls  of  the  warehouses  at  NAAP  and  UMDA,  the  walls  will  offer  no  pro¬ 
tection.  Therefore,  a  250-mph  wind  has  the  potential  to  generate  mis¬ 
siles  that  will  penetrate  the  ton  containers  stored  in  these  warehouses. 
Table  5-6  presents  the  frequency  of  occurrence  of  such  winds  at  these 
sites.  The  conditional  probability  of  a  missile  hitting  a  ton  container 
in  an  orientation  which  could  breach  the  container  is  2.2  x  10~4  at  NAAP 
and  2.7  x  10“4  at  UMDA  (see  Appendix  C). 


5.2. 1.3.  Open  Storage.  Ton  containers  are  stored  in  open  storage  at 
APG,  PBA,  and  TEaD.  A  wind  velocity  of  250  mph  is  required  to  generate 
a  missile  that  can  penetrate  these  ton  containers.  The  frequencies  of 
generating  the  250-mph  wind  are  presented  in  Table  5-7.  The  conditional 


TABLE  5-7 

FREQUENCIES  FOR  WIND-GENERATED  MISSILE  PENETRATION 
OF  TON  CONTAINERS  AND  SPRAT  TANKS  STORED  IN 
WAREHOUSES  AND  OPEN  STORAGE 


Site 

Storage 

Required 

Wind 

Frequency 
of  Wind 

Probability 
of  Hitting  and 
Rupturing  TC 

APG 

Open 

250 

1.0E-7 

6.6E-4 

PBA 

Open 

250 

1.5E-6 

6.6E-4 

NAAP 

Warehouse^4) 

250 

1.5E-6 

2.2E-4 

UMDA 

Warehouse^4) 

250 

1.8E-9 

2.7E-4 

TEAD 

Warehouse^) 

283 

2.7E-10 

4.4E-4 

(*) Metal  wall*. 
(b)Concr*t*  walls. 


probability  of  a  missile  hitting  s  too  container  in  an  orientation  which 
could  breach  the  container  is  6.6  x  10"^  (see  Appendix  C). 

5.2. 1.4.  Tornado-Generated  Missiles  Cause  Munition  Detonation.  The 
analysis  of  scenario  SL23  included  the  estimation  of  the  probability 
that  a  missile  impacting  a  min it ion  would  cause  it  to  detonate  or  in 
the  case  of  rockets,  cause  the  rocket  motor  to  ignite  and  subsequently 
detonate  the  burster.  The  data  presented  in  Ref.  5-5  indicated  that 
a  projectile  with  Comp  B  explosive  could  ignite  when  subjected  to  a 
minimum  impact  velocity  of  123  mph.  Because  the  conditions  of  the 
tests  described  in  Ref.  5-5  do  not  fully  apply  to  the  conditions  being 
considered  here  (i.e.,  the  shell  casing  provides  protection  for  the 
bursters),  it  is  assumed  that  there  is  a  502  chance  that  a  munition  will 
detonate  at  123  mph.  Furthermore,  Army  data  indicate  that  dropping  of 
thousands  of  burstered  sunitions  from  40  ft  did  not  lead  to  any  detona¬ 
tions  (Ref.  5-6).  However,  these  are  newer  sunitions  and  may  not  fully 
represent  the  chemical  munitions  in  the  stockpile.  Therefore,  based  on 
a  consensus  of  risk  experts  (Ref.  5-19),  an  estimated  failure  proba¬ 
bility  of  10~6  per  munition  drop  was  assigned  to  sll  drops  of  6  ft  or 
lower  (equivslent  to  s  free  fsll  drop  of  13.5  mph). 

To  determine  the  probability  of  detonsting  s  munition  st  sn  impact 
velocity  equivalent  to  that  of  s  missile  required  to  penetrate  the  igloo 
end  the  inanition,  we  assumed  e  lognormal  distribution  and  derived  the 
necessary  parameters  (e.g.,  stsndsrd  deviation  and  standard  normal  devi¬ 
ate)  from  these  two  data  pointa.  The  calculation  details  sre  given  in 
the  calculation  eheeta  (Ref.  5-2). 

The  overall  frequency  for  this  scansrio  is  ths  product  of  the 
following : 

1.  Tne  frequency  of  e  tornado  or  wind  which  has  sufficient  veloc¬ 
ity  to  generate  e  missile  that  can  penetrate  the  igloo  end 
inanition. 
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2.  Tha  probability  of  a  miaaila  panatratiag  tha  igloo  and  hitting 
tha  monition  in  auch  a  way  aa  to  cauaa  damage. 

3.  Tha  probability  of  burster  datonation  from  impact. 

Tha  valuaa  for  the  firat  two  variablaa  have  already  bean  praaanted 
in  Section  5.2. 1.1.  Tha  probability  of  a  datonation  given  penetration 
of  buratared  munitions  stored  inaide  tha  iglooa  with  ataal  doors  is  0.07 
and  for  concrete  doors,  0.055.  Sea  Ref.  5-2  for  calculations. 

5.2.2.  Meteorite  Strikes 


Lika  tornado-generated  missiles,  meteorites  striking  the  Igloos, 
warehouses,  and  tha  outdoor  yards  can  lead  to  a  significant  amount  of 
agent  release.  Tha  consequence  of  such  an  accident  is  more  severe  than 
that  from  a  tornado-generated  missile  because  meteorite  strikes  gen¬ 
erally  involve  fires.  Hence,  if  burstered  munitions  are  involved, 
explosive  detonations  could  occur  from  the  fire  or  from  direct  impact, 
leading  to  iratantaneous  agent  releases. 

The  event  tree  developed  for  meteorite-initiated  accidents  is  shown 
in  Fig.  5-2.  The  scenarios  could  not  be  subjected  to  any  preliminary 
screening  without  doing  a  more  detailed  analysis  of  the  what  type  (stone 
or  iron)  and  size  of  meteorite  is  capable  of  penetrating  munitions 
stored  igloos,  warehouses,  or  outdoors.  The  only  identified  accident 
sequence  is  SL8. 

Storage  Magazines 

In  this  scenario  the  meteorite  penetrates  the  storage  magazine  and 
ruptures  some  of  the  munitions  stored  Inside.  The  meteorite  is  expected 
to  be  sufficiently  hot  to  cause  ignition  of  the  exposed  burster, 
propellant,  and/or  agent.  The  fire  is  expected  to  spread,  resulting  in 
the  destruction  of  the  entire  inventory  of  the  storage  magazine. 


Warehouses 


This  scenario  is  similar  to  the  storage  magazines.  The  meteorite 
penetrates  the  warehouse  and  ruptures  some  of  the  bulk  sunitions  stored 
inside.  The  meteorite  causes  the  ignition  of  the  exposed  agent.  Fire 
spreads  end  results  in  the  destruction  of  the  entire  warehouse 
inventory. 

Open  Storage 

In  this  scenario,  the  meteorite  directly  impacts  end  ruptures  some 
ton  containers.  The  heat  from  the  meteorite  is  expected  to  Ignite  the 
exposed  agent,  but  is  not  expected  to  cause  the  rupture  of  additional 
sunitions . 


5.2.2. 1.  Meteorite  Strike  Accident  Analysis.  About  3500  meteorites, 
each  weighing  over  1  lb,  strike  the  earth  each  year;  the  majority  of 
them  are  of  small  sizes  (Ref.  5*8).  Given  the  earth’s  surface  area  of 
5.48  x  1015  ft2,  the  frequency  of  meteorite  strikes  for  meteorites 
weighing  1.0  lb  or  greater  is  6.4  x  10~l^/ft2  (Ref.  5-8).  For  meteor¬ 
ites  one  ton  or  less,  stone  meteorites  are  approximately  10  times  more 
common  than  iron.  However,  iron  meteorites  are  more  dense  and  tend  to 
have  higher  impact  velocities  and  therefore  represent  a  significant 
portion  of  the  total  meteorites  that  can  rupture  the  munitions.  Sec¬ 
tion  4.2  presents  the  size  distribution  of  both  iron  and  stone  meteor¬ 
ites,  compiled  from  data  presented  in  Refs.  5-8  and  5-9. 

For  agent  to  be  released,  the  meteorite  has  to  penetrate  the  stor¬ 
age  structure  end  the  munition  wall.  In  the  case  of  an  igloo,  this 
would  require  initial  penetration  of  a  6-in.  concrete  roof.  The  minimum 
meteorite  impact  velocity  that  would  penetrate  the  earth  cover  and 
collapse  the  6-in.  concrete  roof  is  1500  fps  for  stone  meteorite  and 


5-26 


3800  fps  for  Iron  meteorite.  The  overell  frequency  of  e  meteorite 
cepable  of  penetrating  and  rupturing  the  munitions  in  the  igloo  is: 

P  -  F  <FS  ♦  F±)  A  x  S  ,  (5-4) 

where  F  “  the  frequency  of  a  meteorite  weighing  1  lb  or  more 
striking  the  earth,  6.4  x  10“^^/ ft^, 

Fa  ■  fraction  of  stone  meteorites  which  can  penetrate  the  target, 
■  fraction  of  iron  meteorites  which  can  penetrate  the  target, 

A  ■  target  area  (igloo,  warehouse,  or  open  storage  yard, 

S  •  spacing  factor. 

Table  5-8  presents  the  frequencies  for  meteorite  penetration  of 
munitions  stored  in  the  various  storage  configurations  along  with  the 
size  of  the  meteorites  required  to  penetrate  the  munitions  and  the  data 
required  to  evaluate  Eq.  5-4.  Supporting  calculations  are  presented  in 
Ref.  5-2,  and  the  methodology  is  discussed  in  Appendix  C. 

5.2.3.  Aircraft  Crashes 

The  sequences  describing  the  effects  of  an  aircraft  crash  on  muni¬ 
tions  in  storage  are  SL4,  SL5 ,  SL15,  SL16,  SL17,  SL18,  SL19,  SL20,  and 
SL21. 

The  effects  of  large  (>12,500  lb)  and  small  (12,500  lb  or  less, 
including  helicopters)  aircraft  crashes  on  the  munitions  in  storage 
igloos,  warehouses,  and  open  yards  were  evaluated.  Because  of  the 
potential  for  large  quantities  of  fuel  to  be  carried  by  large  aircraft 
and  the  potential  for  large,  high-velocity  missiles  (e.g. ,  engines), 
the  large  aircraft  crash  scenarios  were  further  divided  into  direct  and 
indirect  crashes.  For  direct  and  indirect  large  aircraft  crashes  onto 
the  storage  area  that  do  not  result  in  fire,  it  is  assumed  that  the 
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impact  of  tha  crash  is  strong  snough  to  cause  tha  detonation  of 


burstered  munitions. 


For  a  small  aircraft  crash  adjacent  to  the  storage  site  to  produce 
a  credible  event,  the  crash  would  have  to  be  so  close  that  it  would  vir¬ 
tually  be  a  direct  hit.  Therefore,  the  small  aircraft  crash  scenarios 
address  only  direct  hits  into  the  storage  areas  including  holding  areas. 

The  event  trees  developed  to  identify  the  agent  release  sequences 
from  aircraft  crashes  are  ahovn  in  Figs.  5-3  and  5-4. 

5.2.3. 1.  Aircraft  Crash  Accident  Analysis.  In  summary,  the  following 
general  assumptions  were  made  in  deriving  the  large/small  aircraft  acci¬ 
dent  scenarios: 

1.  For  large  aircraft  crashes  onto  burstered  munitions,  it  is 
assumed  that  detonations  will  occur  for  both  indirect  and 
direct  hits,  and,  if  a  fire  occurs,  it  is  uncontained. 

2.  No  small  aircraft  crashes  were  assumed  to  be  able  to  suffi¬ 
ciently  damage  the  igloc  to  cause  agent  releases. 

Direct  Crash  of  Large  Aircraft  (Sequences  SL4,  SL16,  SL17) 

For  a  direct  aircraft  crash,  the  target  area  is  the  surface  area  of 
the  building  or  open  yard. 

Storage  Magazines.  The  direct  crash  of  the  main  body  of  a  heavy 
military  or  commercial  aircraft  into  the  shell  or  front  face  of  a  stor¬ 
age  magazine  (igloo)  can  braach  the  igloo  and  allow  crash-generated 
missiles  and/or  aviation  fuel  to  enter  into  the  igloo.  There  is  a  high 
probability  that  one  or  more  sunitions  will  be  crushed  or  punctured  by 
the  missiles.  Burstered  sunitions  could  also  detonate  from  impact.  If 
the  crash  produces  a  fire,  the  fire  is  expected  to  spread  through  the 
igloo,  resulting  in  the  destruction  of  the  entire  igloo  inventory. 
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Warehouses .  A  warehouse  is  not  expected  to  offsr  soy  substantial 
rssistancs  to  crash  of  a  largs  aircraft.  Ths  direct  Impact  of  any  part 
of  a  large  aircraft  will  breach  the  warehouse  and  subject  the  stored 
munitions  to  crash-generated  missiles.  Bulk  containers  vlll  be  crushed 
or  punctured.  If  ths  crash  produces  a  firs  that  le  not  contained,  the 
destruction  of  the  entire  inventory  is  expected. 

Open  Storage.  The  crash  of  a  largs  aircraft  into  an  open  area  is 
expected  to  breach  a  largs  number  of  ton  containers.  If  the  crash  pro¬ 
duces  a  firs,  and  it  is  not  contained,  it  is  sxpsctsd  to  breach 
additional  containers  in  the  inmediate  vicinity  of  ths  initial  container 
that  is  on  fire. 

Indirect  Crash  of  a  Large  Aircraft  (Sequences  SL5.  SL20,  SL21) 

For  an  indirect  crash,  the  target  area  is  determined  by  increasing 
all  perimeters  for  the  direct  crash  by  200  ft. 

Storage  Magatlnes.  Should  a  large  aircraft  crash  adjacent  to  an 
igloo,  the  area  that  is  most  vulnerable  is  tbs  igloo  door.  The  crash¬ 
generated  missiles  can  breach  the  igloo  door  which  essentially  provides 
a  pathway  to  the  breaching  of  inanitions  in  the  line  of  site  of  the  mis¬ 
sile.  Alternatively,  the  igloo  door  may  already  be  open  at  the  time  of 
the  crash  and  the  missile  could  directly  penetrate  the  munitions.  If 
fire  is  involved,  the  missile  could  already  be  on  fire  or  the  fire  could 
propagate  into  the  igloo  opening.  Thus,  if  fire  is  not  contained,  the 
amount  of  agent  release  is  the  same  as  for  the  direct  crash  of  s  large 
aircraft  into  an  igloo. 

Warehouses .  The  designs  of  the  warehouses  are  such  that  the  crash 
of  a  large  aircraft  into  an  area  adjacent  to  e  warehouse  may  also  breach 
the  warehouse  if  the  aircraft  is  flying  towards  the  warehouse  at  the 
time  of  the  crash.  The  amount  of  inanitions  that  are  initially  impacted 
would  be  less  than  the  direct  crash  scenario.  However,  if  fire  is 
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involved  end  uncontained,  the  amount  of  agent  releaee  is  the  name  as 
for  the  direct  crash  of  large  aircraft  into  a  warehouse. 

Open  Storage.  The  accident  scenario  for  the  crash  of  a  large  air¬ 
craft  into  an  area  adjacent  to  the  open  storage  area  considers  that 
there  is  a  502  chance  that  some  ton  containers  would  be  breached  by  the 
crash-generated  missile.  If  fire  is  involved  and  not  contained,  addi¬ 
tional  containers  would  rupture  due  to  excessive  heating. 

Direct  Crash  of  a  Small  Aircraft  (Sequences  SL15.  SL18,  SL19) 

Storage  Magazines.  Due  to  the  high  strength  of  the  storage  maga¬ 
zine,  the  crash  of  a  small  aircraft  is  not  expected  to  breach  an  igloo 
or  affect  the  structural  integrity  of  an  igloo. 

Warehouses .  The  crash  of  a  small  aircraft  into  a  warehouse  would 
very  likely  breach  the  warehouse.  The  resulting  crash-generated  mis¬ 
siles  are  expected  to  crush  or  puncture  some  munitions.  If  the  crash 
produces  e  fire  and  it  is  not  contained,  the  fire  would  involve  the 
entire  inventory. 

Open  Storage.  The  crash  of  e  small  aircraft  into  an  open  storage 
area  is  similar  to  the  largo  aircraft  crash  into  an  open  storage  area 
except  e  smaller  number  of  ton  containers  is  breached. 

5. 2.3. 2.  Aircraft  Crash  Frequency.  The  frequency  of  an  aircraft  crash- 
.ng  while  in  en  airway  or  in  the  vicinity  or  an  airport  can  be  computed 
es  shown  in  Section  4.2. 1.3. 

The  annuel  frequency  of  a  crash  into  a  specific  facility  was  com¬ 
puted  by  multiplying  the  expropriate  frequency  taken  from  Table  4-13  by 
the  effective  target  area  of  the  facility  (see  Appendix  C).  Table  5-9 
summarizes  these  annual  frequencies.  The  calculations  of  the  effective 
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TABLE  5-9 

DATA  BASE  FOR  AIRCRAFT  CRASH-INITIATED  SCENARIOS  FOR  STORAGE 
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MTA  USE  FOR  AIRCRAFT  CRASHMTIATEB  SCENARIOS  FOR  STOTASE 


EVENT 

VM1AJLE 

11 

FREflUEKCT  » 
FWIAIILm 

UNIT 

ERROR  FACTOR 

REFERENCE 

Lirgt  urerift  dirKt  crut  itsrsgi  trui 

AMO  -  M  FT  IGLOO 

LOAN! 40 

4.2-10  per  ficility 

10 

lit  0-2 

MAO  -  Mft  igloo 

LOAN! 60 

.4.0E-10  ye if 

t) 

APS  -  open 

LMPO? 

2.4E-04 

10 

LIAO  •  (fit  Igloo 

USJIBf 

3.2-10 

10 

MAP  -  «k 

LMANM 

3.4E-0f 

10 

PIA  -  90ft  igloo 

lopiko 

1.1E-I0 

10 

•  open 

UP  k? 

1.7E-08 

10 

PUOA  -  90  ft  igloo 

upuko 

4.2-Of 

to 

TEAS  -  10  ft  igloo 

LDTEIBO 

12-11 

10 

•  If  ft  igloo 

LOTEIlf 

3.0E-11 

to 

-  *k 

UTENH 

8.2-10 

10 

•  no* 

UTEJP 

T.fE-Of 

10 

UNO#  -  10  ft  igloo 

UJUNIfiO 

l.tE-Of 

10 

*  HA 

UunuM 

2.2-08 

Urgo  eirerift  indirect  cr«*n  : 

ANAO  *  40  ft  igloo 

LAAN140 

3.2-38  per  fscilitv 

10 

Rif. 

MAO  -  90ft  igloo 

LAM  1 90 

3.2-08  yeir 

10 

APS  *  coon 

IMPS? 

f.4£-Of 

10 

'JAO  *  8?ft  igloo 

LAUiaf 

3.2-33 

10 

NAAP  -  an 

LA3AWH 

i.v'E-og 

10 

P9A  *  30ft  igloo 

LAP! ! 30 

i.  :£-:a 

10 

-  soon 

UP?0P 

3.2-38 

10 

PUCJ  -  30  it  igloo 

UTJIJO 

4.2-37 

10 

TEAS  •  90  ‘t  igloo 

LATE1G0 

Lee— if 

:3 

-  3?  ft  igloo 

LATEIlf 

2.2-04 

10 

•  Ml 

LATEMf 

7.2-0f 

10 

-  soon 

LA7LT3? 

1.2-38 

10 

UNOA  *  90  ft  lolid 

LAW!  60 

i.:e-)7 

10 

•  Ml 

LAtUWX 

1. 3E-37 

1C 

igleo  Sroic.noc  given  Jiroct  ;m»A 

c 

3..'E->1 

nofii 

* .  4 

EJ 

Igitfo  sreicneo  given  ;»JirKt  :ren> 

IS 

2.2E-'j 

no  fit 

- 

**».  i -I 

•rnie'OutScsr  ccr.tnr  ar:;,e«  'Sir.  c,-*iiu 

MO 

l.Ot-'iO 

nor* 

none 

£3 

nrnje  Srcno  Jiven  indirect  sriis 

SKA 

1.2-/1 

nont 

:.ei .  I-". 

Cutooer  : : n t n r  jrens  imoir.  :r»t,-.i 

1  * 

t->i 

te* 

Crur,  ;eei  r.ot  .  .vvoi/e  ;ir* 

■; F 

!.2-)l 

nort 

none 

Re*.  :-.i 

v.v 

J-'i 

«\V 
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TABLE  5-9  ( Continued) 


MTA  MS  TO  A  IKS  AFT  QASIWNITIATE)  SSIUAtfiS  n*R  STOASE 


WOT 

VAIiAHE 

19 

F2E3UetCT  IS 
PMWtUTf 

UNIT 

QONtt  FACTO 

KraftQS 

Crul  results  in  Ur* 

TF 

4.SE-9I 

MM 

MM 

M.  Ml 

Fir*  not  eoatn*  in  1/2  hr  (turstrd) 

ncs 

l.OC+OO 

aan* 

BOt* 

1*1.  3-2  atd  Apptndix 

Fir*  canUd  in  1/2  hr  (nanhurttrd) 

rai 

3.1E-44 

MB* 

3 

#*t.  S-2  atd  Apptadix 

Fir*  Mt  contnd  ia  1/2  hr  (Baakurstrd) 

noi 

1.9C+00 

MB* 

BM* 

Itf .  3*2  aad  Appaodix 

Fir*  reaUintd  («h  ar  op)  mil 

SFHt 

1.3W2 

BOB* 

J 

lit,  3-2 

Suit  aircraft  craih  uarthous*  MAP 

SMAAP 

l.S-M  par 

y  *tr 

10 

Hof.  3*2 

Stall  aircraft  crash  aarahousa  <1R0A 

SA1BI0A 

2.0WO 

to 

M.  3-2 

Stall  aircraft  crash  aarthouic  HAD 

SA72A0 

3.S-)I 

10 

»*».  3-2 

Stall  aircraft  crash  span  AP S 

SWAPS 

a.AE— )3 

to 

Hit.  3-2 

Stall  aireraU  crash  oat*  PSA 

SAOPBA 

1.3-)* 

10 

Uf.  3*2 

Stall  aireraU  crash  « an  TEAS 

3MTK3 

:.2-)7 

10 

Sri.  j-: 

areas  ara  contained  in  Ref.  5-2  and  take  Into  account  such  factors  as 
aircraft  wing  span,  facility  height,  and  facility  vulnerability. 

5. 2. 3. 3.  Probability  of  Fire  Resulting  Prom  an  Aircraft  Crash.  The 
probability  of  a  fire  resulting  from  the  eraeh  has  been  estimated  to 
be  0.45  (Ref.  5-12).  The  successful  containment  of  the  fire  is  defined 
here  to  be  0.5  h  for  unpaekagad  nonburatered  munitions.  This  time  was 
selected  baaed  on  the  thermal  failure  threshold  data  presented  in  Appen¬ 
dix  F,  which  indicate  that  direct  heating  of  ton  containers  for  36  min 
leads  to  hydraulic  rupture.  For  unpackaged  burstered  munitions,  the 
thermal  failure  threshold  range  from  4  min  for  rockets  to  23  min  for 
mines.  Since  the  Army  policy  is  not  to  fight  a  fire  involving  direct 
heating  of  burstered  munitions,  the  probability  of  the  “failure  to 
contain  fire*  event  is  essentially  1.0. 

Thus,  the  amount  of  agent  released  from  bulk  containers  subjected 
to  aircraft  crash  fires  depends  on  the  ability  to  contain  the  fire.  If 
fire  is  allowed  to  progress  for  more  than  30  min,  more  containers  will 
rupture. 

The  ability  of  the  fire-fighting  team  to  extinguish  an  aircraft 
crash  fire  depends  on  many  variables  such  as  the  precise  crash  site,  the 
burn  time  of  the  resulting  fire,  the  availability  of  resources  necessary 
to  contain  the  fire,  etc.  If  fire  fighters  arrive  at  the  crash  site  in 
a  relatively  short  period  of  time,  the  fire  will  be  easier  to  extinguish 
since  it  is  not  likely  to  have  spread  very  far.  Because  the  fire  will 
involve  chemical  agent,  additional  precautions  will  have  be  taken  before 
the  fire-fighting  team  can  atart  extinguishing  the  fire.  Their  arrival 
at  the  perimater  of  the  MDB  or  MHI  is  assumed  to  occur  about  5  min  after 
the  crash.  The  crew  will  have  to  put  on  agent  protective  clothing  in 
addition  to  their  normal,  fire-fighting  suits  of  thermal  protective 
clothing.  Donning  these  clothes  and  checking  for  proper  mask  fit  would 
take  several  more  minutes,  if  it  is  assumed  that  the  crew  was  partially 
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dressed;  i.e.,  in  e  standby  readiness  node.  Because  of  ell  the  detec¬ 
tion,  observation,  communication,  preparation,  and  travel  tasks 
involved,  it  is  estimated  that  it  would  take  the  fire-fighting  team 
IS  min  to  get  to  the  scene  of  the  fire. 

Once  at  the  scene,  the  tine  it  takes  to  actually  extinguish  the 
fire  is  difficult  to  estimate.  GA  interviewed  local  fire  fighting  per¬ 
sonnel  to  get  their  opinion  on  how  long  it  takas  to  extinguish  a  fire 
from  a  small  aircraft  crash  versus  large  aircraft  crash.  No  definite 
time  can  be  given  because  of  the  many  variables  involved.  But  based  on 
local  experience,  it  would  take  1  to  3  h  to  extinguish  a  fire  from  a 
small  aircraft;  while  it  would  take  3  to  10  h  for  a  large  aircraft  fire. 
Using  the  lognormal  distribution,  GA  then  derived  the  probability  of 
containing  the  fire  in  0.5  h  or  less  and  took  no  credit  for  the  first 
15  min  of  the  fire.  More  details  are  provided  in  the  calculation  sheets 
(Ref.  5-2). 


5.2.4.  Earthquakes 


5.2.4. 1.  Storage  Magazines.  The  earthquake-initiated  accident  affect¬ 
ing  the  storage  igloos  assumes  that  the  earthquake  causes  the  minltions 
in  the  igloo  to  fall  and  be  punctured  given  the  presence  of  a  probe  on 
the  igloo  floor  or  the  fall  could  cause  a  burstered  munition  to  detonate 
(Sequence  SL7 ) .  This  scenario  is  modeled  using  the  event  tree  illus¬ 
trated  in  Fig.  5-5. 


The  storage  magazines  are  expected  to  survive  the  largest  credible 
earthquake  with  little  or  no  damage.  Some  cracking  or  spalling  of  the 
concrete  is  possible,  but  this  should  not  produce  a  threat  to  the  muni¬ 
tions  or  significantly  change  the  containment  capability  of  the  maga¬ 
zine.  Igloos  have  been  tested  by  very  large  external  explosions  and 
have  survived  without  damage  (Ref.  5-11).  The  data  from  these  tests 
indicate  that  the  igloo  experienced  accelerations  which  were  in  excess 
of  20  g.  Though  an  explosion  is  not  as  potentially  damaging  to  an  igloo 


V 
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as  an  earthquake  of  equal  acceleration,  the  aimilarities  are  sufficient 
to  conclude  that  a  very  large  earthquake,  in  the  range  of  1.0  g,  is  not 
likely  to  damage  an  igloo. 

Sequence  SL7  postulates  that  the  earthquake  ceuses  the  stacked 
munitions  to  fall  and  may  be  punctured  upon  intact.  Baaed  on  the  coef¬ 
ficient  of  friction  between  pallets  of  txem.it ions ,  a  0.3-g  earthquake 
will  likely  cause  some  stacked  ninitions  to  fall  and  a  0.5-g  earthquake 
will  cause  a  large  number  to  fall.  The  highest  stacked  minitiona  in  an 
igloo  can  potentially  fall  6  ft.  The  munition  failure  threshold  data 
Indicate  that  all  palletized  munitions  and  bulk  containers  can  survive 
the  impact  of  a  drop  from  this  height  but  could  be  punctured  if  they 
were  to  land  on  a  probe  which  was  sufficiently  sharp  and  rigid.  For 
this  analysis  a  0.3-g  earthquake  was  assumed  to  cause  25Z  of  the  stacked 
pallets  to  fall  while  a  0.3-g  earthquake  will  cause  100Z  of  the  stacked 
pallets  to  fall.  The  number  of  pallets  which  have  the  potential  of 
Impacting  a  probe  was  estimated  for  each  aunition  type  based  on  (1)  how 
the  pallets  are  stacked  and  (2)  the  floor  arcs  available  for  the  pallets 
to  fall.  The  calculation  details  are  provided  in  Ref.  3-2. 

The  analysis  of  the  presence  of  a  probe  in  the  igloo  has  indicated 
that  it  is  unlikely  that  there  is  a  probe  inside  the  igloo  that  is  suf¬ 
ficiently  rigid  and  sharp  to  damage  a  munition.  Table  3-10  provides  the 
earthquake  frequency  data  for  each  of  the  eight  sites  and  the  puncture 
probability  of  a  munition  type  given  a  6- ft  drop. 

Sequence  SL22  involves  the  detonation  of  burstered  munitions 
resulting  from  an  earthquake-induced  fall.  The  probability  of  a  muni¬ 
tion  detonating  from  a  6-ft  drop  is  estimated  using  the  same  approach 
discussed  for  detonations  due  to  impact  by  wind-generated  missiles. 

3. 2. A. 2.  Warehouses.  The  event  tree  describing  release  scenarios 
resulting  from  earthquake-induced  accidents  in  warehouses  is  shown  in 
Fig.  3-6.  The  event  tree  applies  to  the  long-term  storage  warehouses  at 
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TABLE  5-10 

DATA  BASE  FOR  ANALYSIS  OF  EARTHQUAKE -INDUCED 


AGENT  RELEASE  IN 

THE  STORAGE 

IGLOOS 

Map  Area  5 

Hap  Area  2 

Sitet  AN AD,  LB AD,  PBA, 

Site!  TEAD 

UMDA,  and  P0DA 

Eirthquake  frequency  (/ yr)  at 

0.3  to  0.5  g  ( F ^ ) 

6.0E-4 

1.9E-5 

>0.5  g  (F2) 

1.0E-4 

6.0E-6 

Probability  stacked  pallets  will 
fall  at 

0.3  to  0.5  g  (Px) 

0.25 

0  25 

>0.5  g  (P2) 

1.0 

1.0 

Number  of  Munitions 
Falling  At 

Munition  Type 

<Ni ) 

0.3  to  0.5 

g 

<N2) 
>0.5  z 

Bomb 

3 

11 

105- nan  cartridge 

5 

20 

4,2-in.  mortar 

5 

18 

Ton  container 

6 

22 

Mine 

4 

14 

Projectile 

11 

46 

Rocket 

5 

20 

Spray  tank 

N/A 

N/A 

SL7  (accident  frequency)  ■  (Fj  * 

♦  (F2  * 

Pj  * 

P2  * 

*»1> 

N2) 
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Fig.  5-6.  Earthquake- induced  releases  from  the  warehouses 
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TEAD,  NAAP,  and  UMDA.  Spray  tank*  ere  stored  at  the  two  warehouses  at 
TEAD.  Ton  containara  ara  atorad  at  NAAP  In  ona  warahouaa  and  at  UMDA  in 
two  adjacant  warabouaaa. 

Accidant  sequences  daacribing  ralaaaaa  from  long-tarm  atoraga  vmre- 
houaaa  ara  givan  in  Tab la  5-11.  Saquanca  dasignatlona  ara  SLxxx26x  for 
tha  NAAP  warahouaa,  SLxxx27x  for  tha  TEAD  varahouaaa,  and  SLxxx28x  for 
tha  varahouaaa  at  UMDA.  Tha  accidant  aaquanca  daaignationa  ara  alao 
ahown  on  tha  avant  traa  in  Pig.  5-6.  For  thoaa  accidant  aaquancas  where 
no  agent  ralaaaa  occura,  the  release  aaquanca  is  labeled  “None."  Those 
release  sequences  whose  frequency  ia  below  1.0  x  10"^®  for  all  sites 
have  been  labeled  with  an  "F"  in  the  avant  traa.  The  events  modeled  in 
Fig.  5-6  are  discussed  below: 


$ 
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1.  Earthquake  Occura.  The  initiating  avant  (Event  1)  in  Fig.  5-6 
is  earthquake  occurrence.  To  aiuq>lify  tha  event  tree  evalua¬ 
tion,  Event  1  further  restricts  tha  earthquake  intensity  to 
an  acceleration  range  from  g^  (0.15  to  0.2  g)  to  gu  (7.7  g). 
Seven  ranges  ace  considered: 


a.  0. 15  to  0.2  g. 

b.  0.2  to  0.3  g. 

c.  0.3  to  0 . A  g. 

d.  0.4  to  0.5  g. 

a.  0.5  to  0.6  g. 

f.  0.6  to  0.7  g. 

g.  Greater  than  0.7  g. 

Earthquakes  below  0.15  g  ara  not  considered  in  the  analysis 
because  the  damage  probabilities  associated  with  such  tremors 
are  negligibly  small.  Detailed  examination  of  seismic  ranges 
above  0.7  g  is  unnecessary  because  earthquakes  above  0.7  g 
have  a  probability  of  almost  1.0  of  causing  damage. 
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TABLE  5-11 

EARTHQUAKE - INDUCED  ACCIDENTS  IN  WAREHOUSES 


Agent  Release  Sequence 

Median  Frequency 
(per  Tear) 

SLSVF  271 

2.7E-04 

SLSVF  272 

8.3E-06 

SLSVF  273 

3.1E-05 

SLSVF  274 

1.9E-06 

SLSVF  275 

7.0E-07 

SLSVF  276 

4.8E-08 

SLKVF  261 

1.1E-OS 

SLKVS  262 

9.5E-07 

SLKVF  263 

1.1E-09 

SLKVS  264 

3.3E-04 

SLKVF  265 

1.4E-04 

SLKHF  281 

4.8E-07 

SLKHF  282 

6.3E-05 

SLKHS  283 

1.9E-07 

SLKHF  284 

3.1S-10 

SLKHF  285 

3.1E-10 

SLKHF  286 

F 

SLKHS  287 

8.5E-10 

SLKHF  288 

F 

SLKHF  289 

F 

SLKHS  2810 

1.4E-05 

SLKHF  2811 

2.9E-05 

SLKHF  2812 

1.2E-07 

SLKHS  2813 

7.6E-08 

SLKHF  2814 

6.9E-08 

SLKHF  2815 

3.6S-10 

SLKHS  2816 

5.6E-05 

SLKHF  2817 

1.1E-05 

NOTE:  F  denotes  extremely  low  frequency. 


The  initiating  event  frequency  at  each  site  is  the  site- 
apccific  frequency  at  which  earthquakes  in  the  range  gl  to 
gu  occur. 

*K*  Warehouses  Damaged  by  Earthquake.  Warehouse  damage  is 
defined  as  structural  collapse.  This  is  the  only  failure 
mode  of  Interest  because  it  will  crush  stored  ton  containers. 
Although  less  severe  damage  can  result  from  an  earthquake,  it 
was  screened  in  quantifying  the  Event  2  probability  because  it 
does  not  induce  ton  container  failure. 

Three  damage  combinations  are  considered  in  Event  2: 

a.  No  warehouses  are  damaged  (K  •  0). 

b.  Only  one  warehouse  is  damaged  (K  •  1). 

c.  Beth  warehouses  are  damaged  (K  •  2). 

Tracking  these  three  probabilities  is  necessary  in  order  to 
estimate  the  agent  release  source  term.  Note  that  since  there 
is  only  one  warehouse  at  NAAP,  the  probability  that  K  »  2  is 
zero  for  that  site. 

Event  2  damage  probabilities  are  based  upon  a  generic  study  of 
damage  to  structures  designed  to  the  Uniform  Building  Cede. 

Munitions  Damaged  in  "L*  Warehouses.  Event  3  addresses 
whether  the  earthquake  causes  an  agent  release  from  the  stored 
munitions.  Two  failure  modes  are  analyzed:  puncture  and 
crushing. 

Only  ton  containers  are  subject  to  these  failures.  Spray 
tanks  are  in  overpacks  which  protect  them  from  crush  forces. 
Furthermore,  they  are  not  stacked  while  in  storage,  hence  they 
cannot  be  punctured. 


Three  duugt  combinations  are  considered  in  Event  3s 


a.  No  egent  releases  result  from  the  earthquake  (L  »  0). 

b.  The  earthquake  cauaea  an  agent  release  in  one  warehouse 

(L  -  1). 

c.  The  earthquake  causes  an  agent  release  in  both  warehouses 

<L  -  2). 

The  puncture  probability  is  the  probability  that  at  least  one 
ton  container  falls  and  strikes  a  probe  of  sufficient  size  and 
density  to  penetrate  it.  The  probability  that  ton  containers 
are  crushed  is  correlated  to  warehouse  damage.  If  K  is  0,  1, 
or  2  in  Event  2,  then  ton  containers  in  none,  X,  or  2  ware¬ 
houses  are  crushed,  respectively.  Since  the  NAAP  site  has  on¬ 
ly  one  warehouse,  the  probability  that  L  •  2  is  zero  for  that 
site.  In  addition,  since  only  spray  tanka  are  stored  in  the 
TEAD  warehouses,  L  can  only  be  zero  at  that  site. 

Ignition  at  *M*  Warehouses.  Seismicelly  initiated  fires  are 
an  important  consideration  because  they  influence  agent  dis¬ 
persion  and  can  thermally  fail  agent  containers.  This  second 
aspect  is  particularly  important  at  TEAD  because  fire  damage 
is  the  only  spray  tank  container  failure  mode. 

Electrical  fires  are  the  only  concern  in  warehouses.  The 
three  conditions  necessary  for  an  electrical  fire  are: 

a.  An  electrical  fault  capable  of  causing  arcing. 

b.  A  supply  of  electric  power  to  sustain  the  arc. 

c.  Contact  with  an  ignition  source. 


Including  this  second  condition  in  the  fire  ignition  probe** 
bility  calculation  is  important  because  available  data  indi¬ 
cate  that  offsite  power  can  be  lost  at  a  relatively  low 
seismic  intensity. 

Condition  three  considers  both  the  agent  and  wood  dunnage 
assemblies  as  possible  ignition  sources  in  the  varehorsea.  If 
ton  containers  have  been  damaged  by  either  crush  or  puncture, 
the  probability  of  igniting  spilled  agent  given  an  electrical 
arc  has  occurred  is  essentially  unity.  If  no  munition  damage 
has  occurred,  the  probability  of  ignition  la  represented  as 
the  ratio  of  exposed  wood  surface  area  to  the  total  area  of 
the  warehouse. 

Similar  to  previous  events.  Event  A  addresses  how  many  ware¬ 
houses  experience  ignition. 

Ignition  at  Warehouse  With  Damaged  Munitions.  If  the  earth¬ 
quake  only  damages  the  containers  stored  in  one  warehouse  and 
ignition  occurs  at  only  one  warehouse,  it  is  necessary  to  dis¬ 
cern  whether  the  fire  is  in  the  warehouse  with  the  damaged 
containers.  If  the  fire  is  in  the  same  warehouse  as  the  dam¬ 
aged  containers,  thermal  failure  and  the  subsequent  release  of 
agent  from  the  second  warehouse  is  averted.  However,  if  the 
damaged  containers  and  fire  are  in  different  warehouses,  then 
the  agent  release  source  term  will  be  increased. 

Suppression  of  fires  has  e  negligible  probability  since  the 
warehouses  have  no  fire  alarms  nor  automatic  fire  suppression 
systems.  For  this  reason  it  is  not  considered  in  the 
warehouse  analysis. 


5.2.5.  Lightning 


Munitions  storsd  iu  igloos  and  vsrshousss  ir«  protected  from  light¬ 
ning.  Hence,  only  ton  containers  stored  outdoors  at  APG,  PBA,  and  TEAD 
Day  be  susceptible  to  lightning  strikes.  No  event  tree  model  has  been 
developed  for  this  scanario.  Basically,  if  sufficiently  energetic 
lightning  strikes  a  ton  container,  the  container  will  be  breached  and 
agent  will  spill  to  the  ground. 

A  lightning  strike  density  for  the  contiguous  United  States  was 
previously  determined  (Ref.  5-12)  based  on  the  correlation  developed 
from  the  duration  of  thunder storms .  Based  on  this  empirical  correla¬ 
tion,  the  frequency  ( events /yr-km^)  for  the  different  storage  locations 
has  been  determined,  as  shova  in  Table  4-7. 

Using  conservative  assumptions ,  a  threshold  lightning  energy 
required  to  burn  through  the  ton  container  wall  was  found  to  be  propor¬ 
tional  to  the  fourth  power  of  the  wall  thickness  as  described  in  the 
calculation  sheets  (Ref.  5-2).  Neglecting  corrosion  thinning  of  the 
container  wall,  the  maximum  value  of  failure  frequency  for  each  cluster 
of  15  ton  containers  at  PBA  is  5.1  x  10**0,  t8  shown  in  Table  5-12. 

The  results  indicate  that  the  threshold  lightning  energy  required 
to  burn  through  the  container  wall  is  a  strong  function  of  wall  thick¬ 
ness.  In  order  to  assess  the  sensitivity  of  the  failure  frequency  to 
corrosion,  e  probability  density  function  for  wall  thickness  was  derived 
by  conservatively  assuming  that  one  ton  container  stored  outdoors  has  a 
leak  through  its  wall.  This  is  a  conservative  estimation  since  no  wall 
leek  has  been  reported.  This  probability  density  function  for  wall 
thickness  is  used  in  conjunction  with  the  lightning  energy  requirements 
to  calculate  the  failure  frequency  of  a  cluster  of  21  containers  at  the 
different  sires.  As  expected  for  the  PBA  site,  the  failure  probability 
is  increased  by  approximately  55  from  the  previous  value  of  5.1  x  10**^. 
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If  *11  oth«r  agent  relaaae  scenarios  hava  frequencies  that  are 
below  chi*  bounding  value,  then  the  extent  of  container  corrosion  toast 
be  investigated.  However,  if  other  scenarios  involving  cooq>*rable  or 
larger  amounts  of  agent  release  also  have  sauch  higher  frequencies  than 
the  bounding  value  for  the  lightning  initiated  release,  then  lightning 
release  scenarios  can  be  ignored.  This  is  true  for  aircraft  crash  acci¬ 
dents  which  lead  to  such  larger  releases  and  also  higher  frequencies  for 
some  cites. 

5.2.6.  flood* 

During  a  flood,  materials  such  as  lumber,  crates,  storage  tanks, 
and  other  lightweight  containers  may  be  carried  away  by  flood  flows  and 
causa  damage  tc  downstream  structures.  Vater  velocities  during  floods 
depend  largely  on  the  size  end  shape  of  the  cross  sections,  conditions 
of  the  stream,  and  the  slope  bed,  all  of  which  vary  on  different  streams 
and  at  different  locations-  In  the  upper  reaches  of  a  flood  basin,  main 
channel  flows  could  be  as  high  as  14  ft/s,  but  typical  overbank,  flow  is 
less  than  2  ft /*  (Ref.  5-13). 

Munitions  stored  in  igloos  and  warehouses  are  considered  protected 
sgairst  flood-generated  projectile*.  The  only  munition  stored  outdoors 
are  mustard-filled  ton  containers  (A?G,  FEA,  and  TEAD) . 

The  puncture  equation  is  as  follows: 

V*  -  (64  (672  DT)3/2}/W  ,  (5-5) 

where  D  -  probe  diameter  (in.), 

T  •  wall  thickness  to  ba  punctured  (in.), 

W  -  weight  of  projectile  (l.e.,  moving  object)  (lb), 

Vm  ■■  velocity  of  projectile  (  't/a). 


The  wall  thickness  of  the  ton  container  is  0.41  in.  Assuming  the 
smallest  probe  size  is  0.8-in.  in  diaaastsr, 

V*  (W)  -  (64) (672  DT)3/2  -  217,335  .  (5-6) 

For  puncture,  the  following  conditions  oust  be  nett 

VB  V 

(ft/«)  (lb) 

1  217,335 

2  53,334 

6  6,037 

10  2,173 

14  1,108 

A  credible  flood-generated  projectile  is  assumed  to  be  a  light, 
steel  tank  with  a  rigidly  attached  0-8-ln.  diameter  probe.  This  could 
be  a  water  storage  tank  or  a  gasoline  tank,  using  a  tank  height  to  diam¬ 
eter  ratio  of  1.2  and  a  wall  thickness  of  0.25  in.  Table  5-13  presents 
the  data  developed  for  steel  tanks.  Tanks  larger  than  10  ft  in  diameter 
would  not  be  credible  except  in  main  channel  flows.  Thus,  typical  over¬ 
bank  flows,  i.e.,  2  ft/s,  would  not  produce  puncture. 

Puncture  could  be  initiated  by  using  an  extreme  overbank  velocity 
of  6.13  ft/s  combined  with  a  10-ft  diameter  floating  tank  with  a  rigidly 
attached  0.8-in.  probe.  The  probability  of  a  6.13  ft/s  overbank  veloc¬ 
ity  is  estimated  to  be  less  than  10X.  This  condition  will  be  designated 
as  the  reference  flood-generated  projectile. 

The  probability  of  puucture  of  a  single  ton  container  from  the 
reference  single  floating  tank  condition  is  as  follows: 

Fp  •  Lp  x  Tp  x  Pp  ,  (5-7) 
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TABLE  5-13 

PROBABLE  SIZE  DISTRIBUTION  FOR  STEEL  TANKS 


D 

Diameter 

(ft) 

1.2D 

Height 

(ft) 

57.67D2 

Weight 

<1M 

5.3407D2 
Surface  Area 
(ft2) 

2 

2.4 

231 

21.36 

4 

4.8 

923 

84.45 

6 

7.2 

2076 

192.0 

8 

9.6 

3690 

342.0 

10 

12.0 

5767 

534.0 

W 
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where  Lp  *  location  probability,  i.a.,  tha  probability  that  tha  proba 
attached  to  tha  floating  tank  ia  pointing  towards  the  ton 
containar  wall  at  tha  moment  of  collision, 

Tp  -  target  probability,  i.a.,  tha  probability  that  tha  tank 
collides  with  tha  ton  containar, 

Fp  ■  probability  of  proba  being  present. 

Lp  can  be  approximated  by  tha  ratio  of  total  surface  area  to  the 
affective  surface  position.  Assuming  thst  tha  proba  must  be  within  a 
1  ft^  location,  them 

Lp  -  1/(7. 06)2  (5.3407)  -  0.0038  .  (5-8) 

Tp  can  be  approximated  by  assuming  a  flood  channel  width  at  the 
point  of  collision  and  comparing  that  to  the  length  of  a  ton  container 
(62  in.).  Using  a  three-mile  wide  channel,  which  is  conservative  for  a 
typical  flood,  then: 

Tp  -  82/ { (5280)  (12)  (3)}  -  0.00043  or  0.0043  (5-9) 

for  the  total  width  of  10  containers. 

Pp  is  estimated  to  be  1  x  10”^.  Thus  the  probability  of  a  refer¬ 
ence  tank  hitting  and  rupturing  a  ton  container  is 

PF  -  (0.0038)  (0.0043)  (0.001)  -  1.6  x  10'8  .  (5-10) 

It  vrould  seem  reasonable  from  tha  flood  basin  size  to  assume  no 
more  than  one  reference  floating  projectile  per  flood  and  the  flood 
reoccurrence  to  be  greater  than  100  years.  In  addition,  the  probability 
of  a  6  ft/s  overbank  velocity  is  estimated  as  102.  Thus,  th^  probabil¬ 
ity  of  rupture  is  approximately  1.63  x  10"^/yr. 
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5.3.  SPECIAL  HANDLING  ACTIVITIES 

5.3.1.  Leaking  Munitions 

Several  scenarios  wr«  identified  that  specif ically  Address  the 
leakage  of  stored  monition*  and  the  accidents  thst  could  occur  in  the 
process  of  ieoleting  lesking  Munitions  which  could  sggrsvste  the  exist¬ 
ing  situstion.  The  svsnt  trees  sre  shown  in  Figs.  5-7  end  5-8. 

Sequence  SL1  Addresses  the  possibility  thst  s  Munition  could  leek 
from  the  time  the  periodic  inspection  he*  been  performed  until  the  next 
periodic  inspection.  It  is  Assumed  thst  the  lesking  munition  will  be 
detected  At  the  time  the  next  inspection  is  mede.  For  sll  sites,  except 
et  APG ,  the  inspections  ere  Assumed  to  be  performed  qusrterly  (90  dsys) . 
At  APG,  the  ton  conteiners  sre  inspected  dsily.  No  event  tree  was 
developed  for  this  scenerio  since  it  is  represented  by  s  single  event 
f eilure. 


Sequences  SL2  end  SL9  Address  Accidents  relsted  to  the  movements 
of  munitions  for  inspection  or  isoletion  of  lookers.  The  forklift  tine 
puncture  or  drop  of  munition  was  determined  to  be  lsrgely  due  to  human 
error.  The  quantification  of  these  events  required  a  detailed  human 
reliability  study  (!*«•*.  5-14),  Essentially  a  task  analysis  was  per¬ 
formed  to  Identify  those  errors  that  could  potentially  impact  agent 
release  probabilities.  Available  data  was  used  to  quantify  the  proba¬ 
bilities  of  some  of  these  errors  and  extrapolations  were  made  from  these 
fixed  data  to  quantify  the  remainder. 

Isolation  of  leaking  rockets  require  special  tasks.  The  leaking 
rockets  are  isolated  in  the  storage  igloo  at  the  original  location, 
where  the  pallet  containing  the  leaking  rocket  is  unpacked.  Only  those 
truck  that  will  carry  it  to  an  igloo  reserved  for  leaking  nxmitlons 
(Ref.  5-1).  The  analysis  assumes  that  the  same  procedure  is  followed 
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foe  isolating  other  leaking  giinltioaa ,  except  that  overpacka  (other  than 
PIGs)  are  used. 

Three  types  of  operator  errors  related  to  leaker  isolation  were 
identified  in  the  task  analysis:  (1)  puncturing  a  munition  with  a 
forklift  tine,  (2)  dropping  a  munition  or  pallet  from  a  forklift,  and 
(3)  dropping  a  single  munition  while  hand-carrying  it.  These  errors  are 
discussed  in  more  deteil  bslow. 

1.  Puncturing  a  munition  with  a  forklift  tina  night  occur  any 
time  a  munition  or  pallet  is  epproechcd  with  a  forklift  tina. 
Puncture  probability  is  a  function  of  the  human  arror  that 
results  in  impact  of  the  tins  with  the  munition  and  of  the 
vulnerability  of  the  munition  to  such  sn  impact. 

2.  Dropping  a  munition  or  a  pallst  from  a  forklift  could  occur 
any  time  a  forklift  ia  carrying  a  load.  This  action  could  be 
caused  by  operating  the  forklift  in  a  way  that  causes  the  load 
to  fall  or  by  loading  the  forklift  such  that  the  load  is  mis- 
alignad  or  tha  weight  distribution  within  the  pellet  or  muni¬ 
tion  is  unbalanced.  It  could  also  result  from  the  pallet’s 
getting  caught  on  and  pulled  off  by  something  it  runs  into. 
Sudden  acceleration  or  deceleration,  sharp  turns,  high-speed 
operation,  or  operation  over  uneven  ground  could  all  be 
contributors  to  monition  drops. 

3.  Dropping  e  munition  while  hand-carrying  it  might  occur  any 
time  the  munition  ia  picked  up,  put  down,  or  carried  without  a 
forklift  or  other  lifting  device.  It  could  be  caused  by  the 
operator’s  falling  as  he  carries  the  munition  or  by  the  muni¬ 
tion’s  slipping  from  his  grasp. 

A  previously  identified  scenario  involving  the  improper  replacement 
of  a  corroded  valve  or  plug  in  a  ton  container  (Sequence  SL16, 


Ref.  5-15),  has  basn  deleted  in  the  peasant  ava lust ion.  It  la  expected 
that  ton  containars  with  GB  will  require  that  thair  valvas  ba  replaced 
before  1991.  The  human  reliability  analysis  (see  Appendix  J)  concluded 
that  this  event  has  a  low  frequency  of  occurrence.  Furthermore,  the 
amount  of  mustard  or  VX  that  could  ba  dispersed  to  the  atmosphere  from  a 
valve  or  plug  rsplacament  operation  is  insignificant. 

Table  5-14  presents  the  data  used  to  evaluate  the  accident  fre¬ 
quencies  for  the  scenarios  addressed  above.  The  frequency  of  scenario 
SL1  was  derived  by  determining  the  leakage  rate  for  each  munition  type 
based  on  the  leaker  data  at  each  site  and  the  total  munition  inventory 
at  each  site.  Since  the  two  parameters  are  classified  information,  they 
will  be  presented  and  discussed  further  in  a  classified  appendix. 

5.3.2.  Human-Error  Probability  Estimation 


Tha  human-error  probabilities  were  quantified.  Using  the  approach 
to  human-error  estimation  described  in  HUREG/CR-1278  (Ref.  5-19).  Prob¬ 
abilities  of  human  errors  were  estimated  baaed  on  several  performance¬ 
shaping  factors  such  as  munition  configuration,  handling  operation, 
clothing  level,  and  crew  else.  These  factors  are  Identified  in  the 
discussions  that  follow  on  the  derivations  of  each  estimate.  Table  5-15 
lists  the  error  probabilities  estimated  for  puncturing  or  dropping  e 
munition  based  on  each  of  these  factors. 

1.  Puncturing  e  inanition.  The  basis  for  the  error  estimates  is 
taken  from  Section  4.4.2  of  Reference  5-1  (pps.  4.4-26).  This 
reference  gives  4E-5  as  a  data-bai sd  estimate  of  the  probabil¬ 
ity  of  handling  errors  using  forklifts  for  the  rocket  stock¬ 
pile.  This  is  an  estimate  of  the  likelihood  of  an  error  in 
forklift  operation  that  potentially  could  lead  to  e  warhead 
rupture  while  attempting  to  isolate  a  laaking  rockat  inside 
ths  storage  igloo. 


TABLE  5-14 

DATA  BASE  FOR  ANALYSIS  OF  SEQUENCES  SL1,  SL2,  AND  SL9 


Frequency 

Event  of  Probebility 


Munition  develope  e  leek  during 
etorege  (Scenario  SLl)t 


Bomb  (TEAD) 

(UMDA) 

4.2-in.  mortar  (AN AD) 

(PUDA) 

(TEAD) 

105-tnm  cartridge  (AN AD) 
(PUDA) 
(TEAD) 

Ton  container 

Mine  (ANAD) 

(PBA) 

(TEAD) 

(UMDA) 

Projectile  (ANAD) 

(LBAD) 

(PUDA) 

(TEAD) 

(UMDA) 

Rocket  (ANAD) 

(LBAD) 

(PBA) 

(TEAD) 

(UMDA) 

Spray  tank 

Forklift  tine  accident  (SL2) 

Munition  puncture  given  tine 
accident i 

Bomb 

4.2-in.  mortar 
105 -cm  cartridge 


7.5E-5  per  year  Ref. 
4.5E-4  per  year 

2.8E-7  per  year 
1.0E-6  per  year 
7.0E-6  per  year 

2.8E-7  per  year 
1.0E-6  per  year 
7.0E-6  per  year 


9.0E-6  per  year 
1.1E-6  per  year 
2.5E-4  per  year 
5. IE-4  per  year 

4.9E-8  per  year 
9.3E-6  per  year 
5.0E-C  per  year 
8.1E-5  per  year 
6.2E-5  par  year 

6.1E-5  per  year 
4.3E-5  per  year 
9.1E-7  per  year 
1.3E-3  per  year 
1.8E-4  per  year 

9.8E-S  per  year 
1.0E-4  per  operator  Ref. 


1.29E-2 

3.68E-2 

8.90E-3 


Reference 


5-16 


5-15 


Ref.  5-2 


TABLE  5-14  (Continued) 


,.'v\ 

# 


Event 

Frequency 
of  Probability 

Reference 

Projectile 

5.00E-2 

Rocket 

2.63E-1 

Sprey  tenk 

1.53E-2 

Munition  dropped  during  leeker 
isoletion  (SL9)i 

Pellet  end  bulk  (B,  S) 

3.0E-4 

Human  reliability 

Single  (C t  D,  M,  P,  Q,  R) 

6.0E-4 

Analysis  (Ref.  5-15) 

Ton  conteiner  (K) 

3.0E-5 

Munition  punctured  given  drop: 

Bomb  (pellet) 

4.72E-4 

Ref.  5-2 

(single) 

1.62E-4 

4.2-in.  morter  (pellet) 

1.24E-4 

(single) 

0.0 

105-mm  certridge  (pallet) 

2.71E-5 

(single) 

0.0 

Ton  conteiner 

1.55E-3 

Mine  (pellet) 

9.27E-5 

(single) 

4.08E-5 

Projectile  (pellet  or  single) 

0.0 

Munition  detonates  given  6  ft 

l.6E-8/munition 

Ref.  5-2 

drop 
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That  estimate  is  bated  on  condition*  that  do  not  entirely 
represent  those  assumed  by  this  study}  namaly,  that  a  three- 
man  crew  will  perform  all  forklift  operation].  In  this  study, 
it  is  assumed  that  a  two-man  crew  will  perform  all  forklift 
operations-'-one  driving  the  forklift  and  one  guiding  forklift 
and  monition  position  from  the  ground.  This  means  that  the 
date-based  estimate  may  not  represent  the  probability  of 
forklift-handling  errors  expected  under  actual  conditions. 
Therefore,  this  estimate  was  revised  to  1  x  10"*  to  account 
for  a  smaller  crew.  The  revised  estimate  of  1  x  10 **  is  the 
probeoillty  that  one  or  both  members  of  a  two-man  crew  will 
err  such  that  the  forklift  tine  is  in  a  position  to  puncture  a 
minition.  (This  puncture  probability  applies  to  those  cases 
in  which  forklift  tines  are  uaed  to  lift  munitions}  it 
includes  palletized  munitions  and  spray  tanks  in  overpacks.) 

Another  difference  is  that  the  original  estimate  from  Refer¬ 
ence  5-1  (A  x  10"^)  was  based  on  operations  with  leaking  rock¬ 
ets.  This  meant  that  it  assumes  that  the  crew  is  wearing 
Level  A  protective  clothing.  If  the  same  forklift  operations 
are  performed  in  less  strenuous  circumstances  (i.e.,  if  a 
lower  level  of  protective  clothing  is  worn),  the  error  proba¬ 
bility  estimate  can  be  lowered.  Here,  it  has  been  lowered  to 
5  x  10"5  for  the  case  of  the  operators’  wearing  partial  pro¬ 
tection  (masks,  gloves,  and  boots)  and  to  1  x  10"^  for  the 
case  of  their  wearing  minimal  protection  (street  clothes,  with 
masks  slung) . 

Dropping  a  munition.  For  palletized  munitions  and  spray  tanks 
in  theiz  overpacks,  huiacn-caused  drops  from  forklifts  are 
judged  to  be  three  times  as  likely  as  punctures  caused  by 
operating  the  same  kind  of  forklift.  The  error-probability 
estimates  are  3  x  10**,  1.5  x  10*^,  and  3  x  10"^  for  dropping 


•  wnition  from  a  forklift  tins  when  waring  Level  A,  Level  C, 
or  Level  F  protective  clothing,  respectively. 

Because  of  unwieldy  pallet  and  overpacked  ep ray  tank  loads  and 
because  it  is  assuaed  that  forklift-tine  loads  are  likely  to 
be  carried  at  higher  speeds  than  are  forklift-beam  loads,  the 
likelihood  of  a  TC’a  or  other  beam-carried  load’s  being 
dropped  because  of  human  error  is  judged  to  be  an  order  of 
magnitude  lower  than  that  of  a  tine-carried  load’s  being 
dropped.  These  are  estimated  to  be  3  x  10~3,  1.5  xlO“®, 
and  3  x  10"^  for  protective  clothing  Levels  A,  C,  and  F, 
respectively. 

For  hand-carrying  mn.it ions ,  munition  drops  are  eatimated  to 
be  twice  as  likely  as  drops  of  tine-carried  loads  from  fork¬ 
lifts.  The  estimated  probabilities  of  dropping  a  hand-carried 
munition  when  wearing  Levels  A,  C,  and  F  protective  clothing 
are  6  x  10'4,  3  x  lO'4,  and  6  x  10~5,  respectively.  (Loads 
carried  by  forklift  beams  are  never  band-carried.) 

These  probability  estimates  are  the  likelihood  of  an  error  per 
handling  operation.  A  single  forklift  operation  may  involve  a 
single  munition  such  as  a  spray  tank  or  as  many  os  48  weapons 
on  a  pallet,  uhlle  a  single  hand-carry  operation  will  always 
involve  only  a  single  munition. 

5.3.3.  Surveillance  and  Maintenance  Activities 

For  tha  continued  storage  option,  additional  handling  accident 
scenarios  were  identified  which  relate  to  the  planned  surveillance  and 
maintenance  of  mnitione  over  the  25-yr  continued  atorage  period. 
According  to  information  provided  to  CA  by  the  U.S.  Army,  all  currently 
stored  munitions  will  be  taken  out  of  their  present  etorage  location* 
ar.d  brought  to  a  maintenance  facility  for  inspection.  The  risk  analysis 


addresses  on.  th«  accidents  that  could  occur  during  th«  movement  of 
th«s«  tainitious  from  storage  to  th«  maintenance  facility  and  back  to 
storage.  Table  5-16  shows  the  number  of  times  each  munition  type  will 
be  moved  to  the  maintenance  facility  for  surveillance.  Note  that  not 
all  munition  types  are  shown  in  this  list.  It  is  therefore  assumed  that 
the  handling  and  transportation  accident  scenarios  will  not  apply  to 
those  munitions  not  listed  in  Table  5-16.  Table  5-17  lists  the 
handling-related  sequences  that  were  identified.  Sequences  SB1  through 
SH7  involve  surveillance  and  scenarios  SH8  through  SB12  involve  pallet 
inspection.  For  pallet  inspection,  the  procedure  is  to  smve  the  pallet 
to  the  igloo  apron  and  Inspect  the  pallet  for  any  degradation  visually. 
It  is  assumed  that  only  electric  forklifts  will  be  used  to  move  the 
pallets. 

The  analysis  of  these  activities  does  not  include  the  actual  main¬ 
tenance  performed  on  the  individual  munitions.  It  is  not  clear  what 
type  of  maintenance  will  be  performed  during  this  period.  Furthermore, 
it  mey  elso  be  possible  thet  the  maintenence  will  be  performed  ln-situ. 
Although  the  number  of  handling  activities  considered  the  movement  of 
the  munitions  from  their  storage  locations  to  a  maintenence  facility  by 
truck,  the  accidents  involving  sctusl  onsite  trsnsportatlon  were  not 
specifically  analyzed.  The  results  of  the  onsite  transportation  analy¬ 
sis  for  the  Onsite  Disposal  Option  (Ref.  5-19)  are  considered  to  apply 
here . 


It  is  not  yet  clear  if  the  Army  will  move  the  munitions  in  over- 
pecks  should  it  decide  to  choose  the  continued  storage  alternative.  If 
the  Army  decides  to  put  them  in  overpecks  than  the  transportation  risk 
analysis  results  for  the  onsite  option  directly  apply.  However,  the 
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TAELE  5-16 

MAINTENANCE  AND  SURVEILLANCE  SCHEDULE 


m 


Number  of  Tinas  Maintenance  is  Required 
Monition  For  Nut  25  yr 


Cert.,  105  sc,  GBV  M360 

Proj.,  155  aan,  GB,  M121/A1 

ProJ.,  155  mm,  H/HD,  M110 

ProJ.,  155  oan,  VX,  M121A1 

Proj.,  155  nan,  VX,  K121A1 

ProJ.,  b  in. ,  VX,  M426 
Proj.,  8  in.,  VX,  M426 
Proj.,  8  In.,  G!l,  M426 
Proj,,  8  in,,  GB,  K426 
Bomb,  GB,  MK 116 MOD  0 
Bomb,  MK94 
Bomb,  GB,  MCI 
Bomb,  GB,  MCI 

Ten  containers,  ell  agents 


2  times 
2  times 

Every  30  months 
Every  8  yr  (102  of  inventory) 
2  times  (902  of  inventory) 
Every  8  yr  (142  of  inventory) 
2  times  (862  of  inventory) 
Every  8  yr  (152  of  inventory) 
2  timet  (852  of  inventory) 

2  times 
Every  8  yr 

Every  8  yr  (302  of  inventory) 
2  tines  (702  of  inventory) 
Once 


Notes i  No  overyacks,  except  for  the  items  currently  stored  in 
overpecks,  will  be  used  for  onsite  movement  to  the.  maintenance 
facility.  This  is  equivalent  to  tbs  currant  procedures.  The 
distance  for  the  truck  moves  between  the  storage  area  and  the 
maintenance  facility  is  sits  specific!  and  tha  approximate  distance, 
if  greater  than  ona  mile  or  one  mile,  should  be  used. 

Surveillance:  Over  the  next  25  yr,  surveillance  will  handle 
approximataly  2500  munitions  par  yaar  for  the  next  25  yr.  Operations 
consist  of  a  forklift  move  of  a  pallat  to  igloo  apron,  inspections, 
and  forklift  mova  hack  into  igloo.  Both  bombs  and  leakers  may  b« 
moved  inside  the  igloc,  but  quantitative  estimates  cannot  be 
provided. 
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HANDLING 

SHI 

SH2 

SH3 

SH4 

SK5 

SH6 

SH7 

SH8 


TABLE  5-17 

ACCIDENTS  INVOLVING  MUNITION  SURVEILLANCE  AND  MAINTENANCE 
DURING  CONTINUED  STORAGE 

Drop  of  pallet  or  container  in  storage  ar«t  or  maintenance 
facility  during  hand ling -related  maintenance  operational 
munition  punctured. 

Forklift  collision  with  short  duration  fire  during  movement 
in  storage  area  or  maintenance  facility  during  handling- 
related  maintenance  operations. 

Forklift  tine  accident  during  movement  in  storage  aree  or 
maintenance  facility  during  handling-related  maintenence 
operations. 

Forklift  collision  accident  without  fire  in  storage  area  or 
maintenance  facility  during  handling-related  maintenance 
operations. 

Drop  of  munition  during  handling  either  in  storage  area  or 
maintenance  facility  (during  handling-related  maintenance 
operations)  leads  to  detonation. 

Collision  accident  during  handling  either  in  storage  area 
or  maintenance  facility  (during  handling-related 
maintenance  operations)  leads  to  detonation. 

Collision  accident  during  handling  either  in  storage  area 
or  maintenance  facility  (during  handling-related 
maintenance  operations)  with  prolonged  fire  leads  to 
thermal  detonation  or  hydraulic  explosion. 

Munition  pallet  dropped  during  handling-related  movement  in 
end  out  of  the  igloo  for  pallet  inspection  munition 
punctured . 


.'TV  wv'T-ifr,-  Tl  'r.v^v, 
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SH9 


suio 


Still 


SH12 
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TABLE  5-17  (Continued) 

Forklift  tine  Occident  during  handling-related  movement  in 
and  out  of  the  igloo  for  pallet  inepection  no  detonation. 

Forklift  colliaion  accident  during  handling-related 
movement  in  and  out  of  the  igloo  for  pallet  inepection  (no 
fire  aince  electric  forklifta  are  uaed){  no  detonation. 

Munition  pallet  dropped  during  handling-related  movement  in 
and  out  of  the  igloo  for  pallet  inapectioni  munition 
detonated. 

Forklift  colliaion  accident  during  handling- related 
movement  in  and  out  of  the  igloo  for  pallet  inepection  (no 
fire  aince  electric  forklifta  are  used)|  munition 
detonated. 
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transportation  risk  for  movement  of  munitions  even  without  overpscks 
should  not  diffsr  significantly  for  tho  following  rsssons: 


1.  Ths  protection  from  impact  provided  by  most  munition  casings 
are  at  least  as  strong  as  the  currently  designed  onsite 
package. 

2.  Host  minition  casings  provide  as  much  protection  from  crush  as 
the  package. 

3.  The  possibility  of  a  fire  longer  than  10  min  has  been  elimi¬ 
nated  by  an  administrative  requirement  of  limiting  the  amount 
fuel  carried  by  a  truck  to  less  than  65  gallons.  Therefore, 
even  if  the  package  provides  a  15-min  protection  from  an  all 
engulfing  fire,  there  will  be  no  difference  in  the  risk 
results  for  packaged  or  unpackaged  munitions. 

A.  Thin-walled  munitions  such  as  the  A. 2-in  mortar  projectiles, 
mines  and  rockets  apparently  will  not  be  taken  to  a  main¬ 
tenance  facility  for  Inspections  since  they  are  not  listed  in 
Table  5-16.  The  package  designed  for  onsite  transportation  of 
munitions  provides  additional  protection  for  these  munitions . 
For  thick-walled  munitions  such  as  the  projectiles,  the  dif¬ 
ference  in  risk  of  whether  they  arc  in  or  out  of  a  package  is 
negligible . 


Table  5-18  presents  the  data  used  to  evaluate  the  accident  frequen¬ 
cies  for  the  scenarios  addressed  above.  The  frequency  of  scenario  SL1 
was  derived  by  determining  the  leakage  rate  for  each  munition  type  based 
on  the  leaker  data  at  each  site  and  the  total  munition  Inventory  at  each 
site.  Since  the  two  parameters  are  classified  information,  they  will  be 
presented  and  dlscuaaed  further  in  a  classified  appendix  to  this  report 
(Appendix  H) . 
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TABLE  5-18 

DATA  BASE  FOR  LEAKERS  IN  STORAGE 


Event 

Munition  develops  s  leak  during 
storage  (Scenario  SL1): 


Frequency  or 
Probability 


Reference 


4.2-in.  mortar 


105— osd  cartridge 


Ton  container 


Projectile 


(TEAD)  7.5E-5  per  yr 
(UMDA)  4. 5E-4  per  yr 

(AN AD)  2.8E-7  per  yr 
(PUDA)  1.0E-6  per  yr 
(TEAD)  7.0E-6  per  yr 

(ANAD)  2.8E-7  per  yr 
(PUDA)  1.0E-6  per  yr 
(TEAD)  7.0E-6  per  yr 

5.9E-6  per  yr 

(ANAD)  9.0E-6  per  yr 
(PBA)  1.1E-6  per  yr 
(TEAD)  2.5E-4  per  yr 
(UMDA)  3.1E-4  per  yr 

(ANAD)  4.9E-6  per  yr 
(LBAD)  9.3E-6  per  yr 
(PUDA)  5.0E-6  per  yr 
(TEAD)  8.1E-5  per  yr 
(UMDA)  6.2E-5  per  yr 


Ref.  5-16 


Rocket 


Spray  tank 

Forklift  tine  accident  (SL2) 

Munition  punctured  given  tine 
accident : 


(ANAD) 

(LBAD) 

(PBA) 

(TEAD) 

(UMDA) 


6.1E-5  per  yr 
4.3E-5  per  yr 
S.1E-?  per  yr 
1.3E-3  per  yr 
1.8E-4  per  yr 

9.8E-5  per  yr 

1.0E-4  per  oper.  Ref.  5-15 


Bomb 

4.2-in.  mortar 
105-sxn  cartridge 
Mine 

Projectile 


1.29E-2 

3.68E-2 

8.90E-3 

7.07E-2 

5.00E-2 


Ref.  5-2 


V> 


TABLE  5-18  (Continued) 


Event 

Frequency  or 
Probability 

Reference 

Rocket 

2.63E-1 

Sprey  Tenk 

Munition  dropped  during  leaker 
Isolation  (SL9): 

1.53E-2 

Pallet  and  bulk  (Br  S) 

3.0E-4 

Human 

Single  (C',D,M,P,Q,R) 

6.0E-4 

Reliability 

Ton  container  (K) 

3.0E-5 

Analysis 
(Ref.  5-15) 

Munition  punctured  given  drop: 

Bomb  (pallet) 

4.72E-4 

Ref.  5-2 

(single) 

1.62E-4 

4. 2-in.  mortar  (pallet) 

1.24E-4 

(single) 

0.0 

105-mjo  cartridge  (pallet) 

2.71E-5 

(single) 

0.0 

Ton  container 

1.55E-3 

Mine  (pallet) 

9.27E-5 

(single) 

4.08E-5 

Projectile  (pallet  or  single) 

0.0 

Munition  detonates  given  drop: 

1 .  6E~8/iaunition 

Ref.  5-2 

Forklift  collision  leads 

4. 3E-6/oper . 

Ref.  5-12 

to  drop  of  munitions 

and 

Ref.  5-2 

Collision  results  in  fire 

0.0725 

Ref.  5-12 

Fire  contained: 

Burstered  (4  tain) 

0.5 

Engineering 

judgement 

Nonburatered  (30  min) 

1.00 

Fuel  will  b 
limited  so 
limit  fire 
to  less  the 
10  min 
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5.4.  SCENARIO  QUANTIFICATION 


Tables  5-19  sod  5-20  prsssat  ths  results  of  the  accident  sequence 
frequency  analysis  for  all  the  storage  scenarios  discussed  previously 
except  those  which  were  initially  screened  (i.e.,  SL10,  SL11,  SL12, 
SL13,  and  SL14).  From  the  results  it  is  evident  that  the  following 
sequences  could  be  screened  out  (from  all  eight  sites)  further  based  on 
the  1.0  x  10“*0/yr  criterion! 

SL17  -  Large  aircraft  direct  crash;  fire  contained  in 

30  min. 

SL21  -  Large  aircraft  indirect  crash;  fire  contained  in 

30  min. 

SL23  -  Tornado-generated  missiles  cause  minition  detona¬ 

tion  upon  iaq>act. 

Since  handling-related  accidents  are  given  in  terms  of  events  per 
munition  operation,  no  screening  can  be  performed  without  divulging 
classified  information. 

Table  5-21  presents  the  results  of  the  accident  scenarios  related 
to  the  planned  surveillance  and  maintenance  of  munitions  over  the  25-yr 
continued  storage  period. 
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The  trends  Indicated  by  the  frequency  results  ere  as  fellows: 


s. 

i 

* 

j 

j 

j 

j. 

i 


a.  Munitions  stored  outdoors  or  in  warehouses  srs  generally 
mors  suscsptibls  to  tornado  strikes.  APG,  PBA,  HAAP , 

TEAD  and  UMDA  have  vmrahouaas.  PBA  and  NAAP  ara  in 
Tornado  Zone  I  while  APG  is  in  Tornado  Zona  II  (Zona  I 
has  the  highest  tornado  frequency).  TEAD  and  UMDA  are  in 
Tornado  Zone  III. 


2.  Meteorite  strike 


a.  Munitions  stored  in  warehouses  are  more  susceptible  to 
meteorite  strikes.  Since  fire  is  generally  present,  a 
meteorite  strike  may  involve  the  entire  warehouse 
inventory. 

3.  Aircraft  crashes 

a.  Munitions  stored  outdoors  are  generally  more  susceptible 
to  these  events.  APG,  TEAD  and  PBA  have  ton  containers 
stored  outdoors.  However,  the  aircraft  crash  probabili¬ 
ties  at  APG  and  PBA  are  relatively  higher  than  the  other 

sites . 

b.  Igloos  provide  minimal  protection  from  direct  crashes  of 
large  aircraft.  The  accident  becomes  more  serious  when 
burstered  munitions  are  involved. 
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c.  Large  Aircraft  crash  frsqusnciss  st  APG ,  LBAD,  sad  TEAD 
grsstly  iacrsssc  for  ths  sir  optioa  bscsuss  of  ths  addi¬ 
tional  landings  and  takaoffs  at  thaaa  sitas. 

4.  Earthquakes 

a.  Earthquakes,  particularly  in  high  aaiamic  locations  such 
as  TEAD,  could  causa  stacked  munitions  to  be  punctured. 
However,  the  probability  of  having  a  probe  present  Inside 
an  igloo  is  quite  low. 

b.  Detonations  due  to  earthquake-induced  drops  are  at  least 
two  orders  of  magnitude  less  likely  than  punctures. 

c.  Thera  is  a  significantly  high  frequency  earthquake- 
induced  agent  releases  to  munitions  stored  in  warehouses 
at  NAAP,  TEAD,  and  tJMDA. 

Leaker-Related  Events 

1.  Forklift  drop  accidents  can  occur  more  frequently  than  fork¬ 
lift  tine  punctures. 

2.  Use  of  a  lifting  beam  instead  of  a  tine  leads  to  an  order  of 
magnitude  decrease  in  drop  frequency. 


5.5.  UNCERTAINTY  ANALYSIS 


5.5.1.  Ovirvltw 

The  frequency  results  presented  in  Tables  5-16,  S-17,  end  5-18  ere 
median  values.  The  values  shown  in  the  range  factor  column  represent 
the  ratios  of  the  95^  percentile  values  to  the  madian  values.  The  range 
factors  vary  from  10  to  almost  100.  The  tornado  frequency  results  have 
the  highest  uncertainties  largely  becauae  of  the  difficulty  to  accu¬ 
rately  model  the  probability  that  the  missile  will  be  in  the  proper  ori¬ 
entation  to  penetrate  the  sunition  and  actually  how  many  misailea  per 
square  foot  of  wind  will  be  present.  The  ability  to  model  low-impact 
detonations  also  lead  to  large  uncertainties  In  the  final  results.  The 
data  available  are  scarce  and  sometimes  not  directly  applicable  to  the 
scenario  being  analyzed. 

5.5.2.  Error  Factors 


In  those  cases  '/here  sufficient  information  exists  to  determine  the 
upper-  and  lower-bound  values,  the  error  factor  was  derived  by  assuming 
that  the  upper-bound  value  is  equivalent  to  the  95t‘l  percentile.  The 
engineer’s  best  estimate  is  taken  as  the  median  value  based  on  the  prop¬ 
erties  of  the  lognormal  distribution.  This  choice  is  rather  conserva¬ 
tive  since  the  mean  value  of  the  resulting  distribution  becomes  larger 
than  the  best  estimate  or  reconmended  value. 

In  many  cases,  however,  the  data  sources  were  limited.  Therefore, 
the  assignment  of  error  factors  was  entirely  based  on  engineering  Judg¬ 
ment,  taking  into  consideration  the  important  parameters  which  may 
influence  a  particular  variable.  The  generic  guidelines  for  the  uncer¬ 
tainty  assessment  is  shown  in  Table  5-19. 

5.5.2.  1.  Tornado  Sequence  Uncertainties.  The  frequency  of  the  initiat¬ 
ing  event  itself  (!.«.,  tornado  wind  of  sufficient  intensity  to  generate 


missiles  occurs)  is  assigned  an  error  factor  of  10  per  Table  5-19.  The 
conditional  probability  of  a  missile  hitting  the  structure  and  penetrat¬ 
ing  the  munition  is  assigned  an  error  factor  of  SO.  As  explained  in 
Section  5.2. 1.1  (Eq.  5-2),  this  event  is  the  product  of  four  variables. 
The  uncertainty  is  largely  due  to  the  variable  Da  which  is  the  number  of 
missiles  per  square  foot  of  wind.  The  conditional  probability  of  a 
burstered  munition  detonating  when  hit  by  a  missile  is  assigned  an  error 
factor  of  2. 


5. 5. 2. 2.  Meteorite  Strike  Sequence  Uncertainties.  The  frequency  of  a 
meteorite  strike  is  assigned  an  error  factor  of  10.  The  conditional 
probability  of  a  meteorite  penetrating  and  rupturing  the  munition  1s  the 
product  of  (1)  fraction  of  stone  and  iron  meteorites  capable  of  pene¬ 
trating  the  target;  (2)  target  area;  and  (3)  spacing  factor.  This  event 
is  assigned  an  error  factor  of  10.  The  uncertainty  is  largely  due  to 
the  fraction  of  stone  and  iron  meteorites  capable  of  penetrating  the 
structure. 

5. 5. 2. 3.  Aircraft  Crash  Sequence  Uncertainties.  The  aircraft  crash 
frequency  is  assigned  an  error  factor  of  10.  Aircraft  crash  accident 
sequences  with  or  without  fires  (from  impact)  have  been  considered.  For 
this  reason  no  uncertainties  were  assigned  to  either  the  probability  of 
having  a  fire  (0.45)  or  no  fire  (0.55).  The  uncertainties  associated 
with  the  structural  damage  (l.e.,  igloo  or  warehouse)  given  an  aircraft 
crash  are  given  in  Table  5-8.  For  events  with  probabilities  greater 
than  0.1  the  uncertainties  assigned  followed  the  guidelines  given  in 
Table  5-19. 

5. 5. 2. 4.  Earthquake  Sequence  Uncertainties. 

Storage  Igloos 

The  initiating  event,  earthquake  occurs,  is  assigned  an  error  fac¬ 
tor  of  10.  The  conditional  event,  munition  punctured  given  drop,  is 


assigned  an  arror  factor  of  5.  The  puncture  probability  is  a  function 
*  of  drop  height,  weight  and  praaanca  of  a  proba  of  aufficiant  langth  and 

density.  The  uncertainty  ia  largely  due  to  the  last  variable.  Note 
also  that  no  uncertainty  from  errors  with  the  models  has  been  considered 
since  this  is  beyond  the  statc-of-the  art  of  present  day  uncertainty 
analysis. 


5. 5. 2. 4.  Earthquake  Sequence  Uncertainties. 

Warehouse  Storage 

Event  1 :  Earthquake  Occurs 

The  initiating  event  frequency  is  assigned  an  error  factor  of  10. 

Event  2:  "K"  Warehouses  Damaged  by  Earthquake 

Uncertainty  factors  for  values  above  0.1  are  taken  from  Table  5-22. 
V\'  For  probabilities  between  0.01  and  0.1  an  uncertainty  factor  of  3  is 

recommended.  Probabilities  below  10'^  is  assigned  an  uncertainty  factor 
of  3.  The  uncertainty  distribution  in  each  case  is  lognormal. 

5. 5. 2. 5.  Handling  Accident  Sequence  Uncertainties.  All  initiating 
events  associated  with  munitions  handling  (i.e.,  drops,  collisions, 
forklift  tine  punctures)  were  assigned  an  error  factor  of  10.  The  con¬ 
ditional  probability  of  puncturing  the  munitions  given  any  one  of  the 
initiating  events  ia  assigned  an  error  factor  of  3.  The  probability  of 
causing  a  low-impact  detonation  (i.e.,  drop  from  6  ft  or  lower)  is 
assigned  an  error  factor  of  10. 
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6.  QUANTIFICATION  BASES 


6.1.  HANDLING  ACCIDENT  DATA 

All  initiating  avant  fraquancy  accidents,  axe apt  for  forklift 
colliaiona,  war a  darivad  from  tha  human  raliability  analysis  and  ara 
discussad  in  Sactlon  6.2. 

The  forklift  collision  accident  fraquancy  was  darivad  from 
Ref.  6-1.  In  Ref.  6-1,  accidents  wara  defined  to  include  incidents 
that  result  in  fatalities ,  injuries,  or  property  damage.  The  basic 
truck  accident  rata  ia  2.S  x  10~6  accidanta /mile.  From  Table  II  of 
Ref.  6-1,  the  percent  of  accidents  leading  to  collisions  with  trucks, 
autos,  and  stationary  objects  and  overturns  is  89.35X.  Table  III  of 
Ref.  6-1  also  show  that  50Z  of  all  .accidents  occur  at  speads  of  30  to 
40  mph. 

To  convert  the  basic  rata  to  accidents  par  operation,  the  opera¬ 
tor’s  exposure  time  in  the  highway  is  determined.  If  the  operator  was 
traveling  at  35  mph,  the  exposure  time  is  1.7  min. 

In  order  to  apply  this  information  to  forklift  collision  accidents, 
the  following  were  assumed: 

1.  The  total  operator  exposure  time  during  tha  forklift  operation 
is  10  min.  This  includes  the  lifting  of  munitions  from  the 
stack,  moving  them  to  another  area,  and  unloading  them. 

2.  The  time  to  travel  from  one  point  to  another  is  assumed  to  be 
one-third  of  the  total  time,  or  3.3  min. 


3.  Forklift  collision*  will  occur  at  speeds  no  greater  than 
40  mph  (i.e.,  two  forklifts  traveling  at  20  n?h) . 

Therefore,  forklift  collision  accident  rats  iat 

2.5  x  10“®  x  0.893  x  r—r  •  4.3  x  10”® /operation 

This  median  value  is  assigned  an  error  factor  of  10  on  the  basis  that 
the  data  is  only  for  6  yr  and  therq  may  be  other  unreported  incidents 
more  directly  related  to  forklift  operations. 

Reference  6-1  also  indicates  that  2SZ  of  fires  result  from 
collision-type  accidents.  It  is  not  evident  from  the  data  if  fire 
from  collision  is  directly  proportional  to  truck  speed.  Our  analysis 
assumes  that  it  is.  Therefore,  the  data  was  modified  as  follows: 

Probability  of  fire  -  0.25  x  r  ?.9  -  0.0725  , 

where  the  factor  0.29  represents  the  percent  of  collisions  occurring  at 
less  than  20  mph. 
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6.2.  HUMAN  FACTORS  DATA 


Human-error  probabilities  war*  quantified  for  u*«  in  tha  handling 
scenarios  using  the  approach  to  human-error  estimation  described  in 
NUREG/CR-1278  (Ref.  6-2),  probabilities  of  human  errors  ware  estimated 
based  on  several  performance-shaping  factors  such  as  munition  config¬ 
uration,  handling  operation,  clothing  level,  end  crew  site.  These  fac¬ 
tors  are  identified  in  the  discussions  that  follow  on  the  derivations  of 
each  estimata.  Table  6-1  lists  the  error  probabilities  estimated  for 
puncturing  or  dropping  a  munition  based  on  each  of  these  factors.  These 
error  probabilities  will  be  Incorporated  into  the  handling  scenarios  as 
shown  in  the  data  tables  in  Table  6-2. 

1.  Puncturing  a  munition.  Tha  basis  for  the  error  estimates 
is  taken  from  Section  A. 4. 2  of  Ref.  6-3  (pages  4.4  through 
4.26).  This  reference  gives  4  x  10“5  as  e  date-based  estimate 
of  the  probability  of  handling  errors  using  forklifts  for  the 
rocket  stockpile.  This  is  an  estimate  of  the  likelihood  of  an 
error  in  forklift  operation  that  potentially  could  lead  to  a 
warhead  rupture  while  attempting  to  isolate  a  leaking  rocket 
inaid*  the  storage  igloo. 

That  estimate  is  based  on  conditions  that  do  not  entirely  rep¬ 
resent  those  assumed  by  this  study;  namely,  that  a  three-man 
crew  will  perform  all  forklift  operations.  In  this  study,  it 
is  assumed  that  a  two-man  crew  will  perform  all  forklift 
operations — on*  driving  the  forklift  and  one  guiding  forklift 
and  munition  position  from  the  ground.  This  means  that  the 
data-based  estimate  may  not  represent  the  probability  of 
forklift-handling  errors  expected  under  actual  conditions. 
Therefore,  this  estimate  was  revised  to  1  x  10"^  to  account 
for  a  smaller  crew.  The  revisad  estimate  of  1  x  10"^  is  the 
probability  that  one  or  both  members  of  a  two-man  crew  will 
err  such  that  the  forklift  tine  is  in  a  position  to  puncture  a 
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TABLE  6-2 

DATA  BASE  FOR  LEAKERS  IN  STORAGE 


Event 


Frequency  or 
Probeblllty 


Munition  develop*  e  leek  during 
•torege  (Scenerio  SLl)t 


Bomb 

(TEAD) 

7.5E-5  per 

yr 

(OMDA) 

4.5E-4  per 

yr 

4.2-in.  mortar 

(AN AD) 

2.8E-7  per 

yr 

(PUDA) 

1.0E-6  per 

yr 

(TEAD) 

7.0E-6  per 

yr 

105-mn  cartridge 

(AN AD) 

2.8E-7  per 

yr 

(PUDA) 

1.0E-6  per 

yr 

(TEAD) 

7.0E-6  per 

yr 

Ton  conteiner 

5.9E-6  per 

yr 

Mine 

(AN AD) 

9.0E-6  per 

yr 

(PBA) 

1. IE-6  per 

yr 

(TEAD) 

2.5E-4  per 

yr 

(UMDA) 

3.1E-4  per 

yr 

Projectile 

(AN AD) 

4.9E-6  per 

yr 

(LBAD) 

9.3E-6  per 

yr 

(PUDA) 

5.0E-6  per 

yr 

(TEAD) 

8.1E-5  per 

yr 

(UMDA) 

6.2E-5  per 

yr 

Rocket 

(AN AD) 

6.1E-5  per 

yr 

(LBAD) 

4.3E-5  per 

yr 

(PBA) 

9.1E-7  per 

yr 

(TEAD) 

1.3E-3  per 

yr 

(UMDA) 

1.8E-4  per 

yr 

Spray  tank 

9.8E-5  per 

yr 

Forklift  tine  accident  (SL2) 

1.0E-4  per 

oper 

Munition  punctured  given  tine 

accident : 

Bomb 

1.29E-2 

4.2-in.  mortar 

3.68E-2 

105-mm  cartridge 

3.90E-3 

Mine 

7.07E-2 

Projectile 

5.00E-2 

Reference 


Ref.  5-20 


Ref.  5-17 


Ref.  5-2 


TABLE  6-2  (Continued) 


Event 

Frequency  or 
Probability 

Reference 

Rocket 

2.63E-1 

Spray  tank 

Munition  dropped  during  leaker 
ieolation  (SL9)> 

1.S3E-2 

Pallet  and  bulk  <B,  S) 

3.0E-4 

Human 

Single  (C,D,M,P,Q,R) 

•  OE-4 

Reliability 

Ton  container  (K) 

3.0E-5 

Analysis 
(Ref.  5-17) 

Munition  punctured  given  drop: 

Bomb  (pallet) 

4.72E-4 

Ref.  5-2 

(eingle) 

1.62E-4 

4.2-in.  mortar  (pallet) 

1.24E-4 

(eingle) 

0.0 

105-om  cartridge  (pallet) 

2.71E-5 

(single) 

0.0 

Ton  container 

1.55E-3 

Mine  (pallet) 

9.27E-5 

(eingle) 

4.08E-5 

Projectile  (pallet  or  eingle) 

0.0 

Munition  detonates  given  drops 

1.6E-8 /munition 

Ref.  5-2 

Forklift  collision  leads 

4.3E-6/oper. 

Ref.  5-12 

to  drop  of  munitions 

and 

Ref.  5-2 

Collision  results  in  fire 

0.0725 

Ref.  5-12 

Fire  contained: 

Burstered  (4  min) 

0.5 

Engineering 

Judgement 

Nonburstered  (30  min) 

1.00 

Fuel  will  be 
limited  so  as 
limit  fire 
to  less  than 
10  min 

munition.  (This  puncture  probability  applies  to  those  esses 
in  which  forklift  tines  ere  used  to  lift  munitions;  it 
includes  pelletized  munitions  end  spray  tanks  in  overpacks.) 

Another  difference  is  that  the  original  estimate  from  Ref.  6-4 
{4  x  10~3)  was  bnsed  on  operations  with  leaking  rockets.  This 
meant  that  it  assumes  that  the  crew  is  wearing  Level  A  protec¬ 
tive  clothing.  If  the  same  forklift  operations  are  performed 
in  less  strenuous  circumstances  (i.e.,  if  a  lower  level  of 
protective  clothing  is  worn),  the  error  probability  estimate 
can  be  lowered.  Here,  it  has  been  lowered  to  5  x  10*5  for  the 
case  of  the  operators'  wearing  partial  protection  (masks, 
gloves,  and  boots)  and  to  1  x  10“^  for  the  case  ci  rheir  wear¬ 
ing  minimal  protection  (street  clothes,  with  masks  slung). 

Dropping  s  munition.  For  pallatized  munitions  and  spray  tanks 
in  their  overpacks,  human-caused  drops  from  forklifts  are 
judged  to  be  three  times  as  likely  as  punctures  caused  by 
operating  the  same  kind  of  forklift.  The  error-probability 
estimates  are  3  x  10”*,  1.5  x  10"^,  and  3  x  10“^  for  dropping 
a  munition  from  a  forklift  tine  when  wearing  Level  A,  Level  C, 
or  Level  F  protective  clothing,  respectively. 

Because  of  unwieldy  pallet  and  overpacked  spray  tank  loads, 
and  becauee  it  is  assumed  that  forklift-tine  loads  are  likely 
to  be  carried  at  higher  speeds  than  are  forklift-beam  loads, 
the  likelihood  of  a  ton  container  or  other  beam-carried  loads 
being  dropped  because  of  human  error  is  judged  to  be  an  order 
of  magnitude  lower  than  that  of  a  tine-carried  load  being 
dropped.  These  are  estimated  to  be  3  x  10”^,  1.5  x  10”^, 
and  3  x  10*^  for  protective  clothing  Levels  A,  C,  and  F, 
respectively. 


For  hand-carried  munition*,  munition  drops  sr«  estimated  to  be 
twics  *s  likely  as  drops  of  tine-carried  load  from  forklifts. 
Tbs  sstimarsd  probabilities  of  dropping  s  hand-car r led  muni¬ 
tion  when  wearing  Levels  A,  C,  and  F  protective  clothing  are 
6  x  10-4,  3  x  10-4,  and  6  x  10"5f  respectively.  (Loads  car¬ 
ried  by  forklift  beams  are  never  hand  carried.) 

These  probability  estimates  are  the  likelihood  of  an  error  per 
handling  operation.  A  single  forklift  operation  may  involve  a 
single  munition  such  as  a  spray  tank  or  as  many  as  48  weapons 
on  a  pallet,  while  a  single  hand-carry  operation  will  always 
involve  only  a  single  minition. 
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7.  AGENT  RELEASE  CHARACTERIZATION 


Section  7.1  describes  the  approach  used  in  this  study  for  analyzing 
the  sgent  release  for  the  various  accident  conditions.  Application  of 
the  approach  to  the  accident  sequences  analyzed  in  the  continued  storage 
option  is  discussed  in  Section  7.2. 

The  consequences  of  an  agent  releaaa  event  are  strongly  dependent 
on  agent  type,  amount  of  agent  release,  and  the  mode  and  duration  of  the 
release.  Agent  dispersion  and  subsequent  affects  will  be  calculated  in 
a  separate  study  using  a  computer  program  called  D2PC  (Ref.  7-1)  that 
embodies  an  analytical  model  for  calculating  agent  dispersion  under  dif¬ 
ferent  meteorological  conditions.  Feedback  from  these  consequence  cal¬ 
culations  helped  to  guide  the  release  characterization. 

7.1.  RELEASE  ANALYSIS  APPROACH  AND  BASES 


7.1.1. 


>roach 


The  approach  fornulaton  was  aided  by  a  systematic  review  of  the 
mechanisms  involved  in  expelling  agent  from  its  normal  confinement.  The 
analyses  performed  by  Arthur  D.  Little  for  the  M55  rockets  (Refs.  7-2 
through  7-6)  were  portially  applicable,  and  similar  assumptions  as 
appropriate  were  made  for  this  analysis.  Additional  calculations  were 
performed  in  this  stu<y  to  determine  the  quantity  of  agent  released  to 
the  environment  for  plant  operation  accidents  involving  monitions  other 
than  the  M3 5  rockets. 


For  the  accident  scenarios  that  involve  agent  still  confined  in  the 
munition,  the  agent  release  is  dependent  on  the  munition’s  mechanical 
and  thermal  failure  thresholds,  and  the  behavior  of  the  explosives  and 


propellants  during  the  accident  scenarios.  These  are  discussed  in  the 
following  sections.  Once  it  was  determined  that  the  agent  could  be 
released  from  its  normal  confinement,  calculations  were  performed  to 
determine  the  amount  of  agent  released  and  the  possible  paths  by  which 
the  agent  could  enter  the  atmosphere. 

7.1.2.  Mechanical  Failure  Release 

Munition  failures  result  when  sufficient  forces  are  generated  dur¬ 
ing  accidents.  A  discussion  of  the  nwition  failure  thresholds  is  given 
in  Appendix  F.  The  failure  thresholds  of  interest  arei 

1.  Mechanical  failure  of  the  agent  containment  due  to  impact, 
crush  or  puncture. 

2.  Detonations  initiated  by  impact  or  fire. 

3.  Thermally  Induced  hydraulic  rupture  of  the  agent  containment. 

7. 1.2.1.  Impact  Failure.  The  threshold  for  impact  failure  is  given  in 
terms  of  velocity  of  impact  against  a  nonyielding  object,  or  the  equiva¬ 
lent  drop  height.  When  the  impact  failure  threshold  is  reached,  it  is 
assumed  that  the  onset  of  failure  begins.  In  the  case  of  an  accident 
involving  more  than  one  munition,  e.g.,  a  pallet  drop  or  a  forklift  col¬ 
lision,  every  munition  does  not  experience  the  effect  of  impacting  a 
nonyielding  surface.  At  the  threshold  point,  it  la  assumed  that  at 
least  one  nunition  hes  experienced  failure.  It  was  further  assumed  that 
the  number  of  munitions  that  exparlance  failure  is  a  function  of  the 
kinetic  energy  involved  in  the  accident. 

The  impact  velocity  required  to  initiate  failure  varies  from  35  mph 
for  rockets  (drop  height  of  40  ft)  to  50  mph  for  projectiles  (drop 
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height  of  120  ft).  The  expected  impact  velocity  (or  drop  height)  for 
some  accidents  1st 


Impact  Velocity  of 

Accident  Type  Drop  Baight 

Pallet  drop  during  handling  6  ft 

Forklift  collision  5  mph 

In  view  of  the  above,  failure  due  to  intact  ia  not  considered  to  be  a 
significant  contribution  for  handling  accidents,  i.e.,  other  failure 
mechanisms  dominate. 


7. 1.2. 2.  Cruah  Failure.  Crush  forces  arc  static  forces  completely 
independent  of  velocity.  Crush  forces  may  arise  from  a  building 
collapse  due  to  an  earthquake. 

Crush  thresholds  are  defined  for  a  single  munition  and  for  a  pallet 
of  munitions.  When  the  crush  threshold  for  pallets  is  exceeded,  it  var- 
conservatively  assumed  that  all  monitions  in  the  pallet  will  fail. 

A  linear  relationship  for  the  number  of  units  that  would  fall  due 
to  crush  was  assumed  as  follows: 

F 

n  -  r-  ,  (7-1) 

ro 

where  F  •  crush  force  available  in  the  accident, 

F0  “  crush  force  threshold  for  the  palletised  monition. 

At  n  ■  1,  all  the  munitions  in  one  pallet  have  failed.  The  avail¬ 
able  force  in  an  accident  can  be  the  weight  of  a  vehicle,  the  weight  of 
a  building  collapse,  or  the  weight  of  any  large  object  that  can  fall  on 
the  munitions. 
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Ths  accident  scenarios  that  ar*  capable  of  generating  forces  suffi¬ 
ciently  high  to  produce  crush  Involve  asternal  events  where  Deny  pellets 
aey  he  involved  in  the  accident.  Thus,  it  is  possible  that  more  then 
one  pellet  can  fail.  For  example,  the  crush  threshold  for  a  rocket  pal¬ 
let  containing  IS  rockets  is  43,400  lb.  If  the  weight  of  an  object  is 
100,000  lb,  Eq.  7-1  pradicts  a  failure  quantity  of  2.3.  This  corre¬ 
sponds  to  2.3  pallets,  or  about  34  rockets  being  crushed.  If  the  avail¬ 
able  crush  force  is  less  than  the  failure  threshold  for  a  single  muni¬ 
tion,  then  naturally,  no  munitions  fail. 

Equation  7-1  is  conservative  because  it  assumes  that  the  total 
available  load  arising  from  an  accident  is  concentrated  in  the  most 
efficient  way  to  crush  the  nunitlons.  If  the  load  was  uniformly  dis¬ 
tributed  over  uany  pallets,  fewer  or  no  failures  would  occur. 

7. 1.2.3.  Puncture  Failure-  TLe  puncture  threshold  is  defined  in  terms 
of  the  ratio  of  velocity  to  radius  of  curvature  ass*  -sing  the  munition 
(or  pallet")  impacts  an  unyielding  slander  object  or  probe.  Generally, 
the  failure  threshold  for  puncture  is  the  lowest  of  the  three  mechanical 
failure  thresholds.  The  number  of  failures  that  can  occur  in  an  acci¬ 
dent  is  dependent  on  the  number  of  probes  present.  If  the  puncture 
failure  threshold  is  exceeded,  it  is  assumed  that  one  probe  will  fail 
one  munition. 

7. 1.2.4.  Liquid  Spills  and  Evaporation.  Once  mechanical  failure 
occurs,  the  munition  agent  inventory  may  be  able  to  spill  out  on  the 
ground  or  water.  For  forktina  punctures,  the  puncture  is  assumed  to 
consist  of  s  3-in.  disaster  hole  just  below  the  munition  centerline. 

The  amount  and  tins  of  spill  is  calculated  to  be  that  which  can  drain  by 
gravity  out  of  the  hole.  Impact,  crush  and  probe  punctures  sra  assumed 
to  result  in  the  epill  of  the  entire  min it ions  inventory. 

If  the  spill  occurs  outdoors  during  leaker  handling,  the  release 
analysis  ends  with  the  determination  of  the  type  and  mass  of  liquid 


Agent  spilled  end  type  of  eurfece  where  the  spill  occurs.  This  informa¬ 
tion  is  sufficient  input  for  cslculstion  of  atmospheric  dispersion  by 
the  D2PC  confute r  program  (Ref.  7*1).  All  liquid  spills  during  handling 
or  ground  transport  are  assumed  to  occur  on  a  hard,  flat  impervious 
surface  such  as  level  concrete  or  asphalt.  The  evaporation  of  the  spill 
is  calculated  by  the  D2PC  program  by  calculating  the  max (gum  puddle  area 
and  the  corresponding  evaporate  rate. 

If  the  spill  occurs  indoors,  the  release  analysis  in  this  report 
extends  to  the  time  dependent  rates  of  evaporation.  In  general,  the 
D2PC  program  was  applied  to  calculate  the  evaporation  rate  based  on  the 
type  and  mass  of  agent  spill  and  considering  any  confinement  of  the 
liquid  puddle  or  pool.  The  D2PC  general  equation  for  evaporation  of  a 
spill  over  a  floor  area  corresponding  to  a  liquid  pool  depth  of  1/32  in. 
relates  the  time  t  to  evaporate  the  entire  spill  inventory  M  (pounds) 
in  terms  of  a  power  function  of  M  and  two  coefficients  a  and  b.  The 
equation  is 

t  •  arf*  ,  (7-2) 

where  t  -  time  in  thousands  of  minutes, 

a,  b  ■  constant  for  agent  GB  (a  •  0.79,  b  ■  0.2S3), 
a,  b  ■  functions  of  M  for  agents  H  and  VX. 

The  area  (ft^)  corresponding  to  the  spill  M  (lb)  and  pool  thickness 
1/32  in.  is  5.91  times  M.  For  restricted  pool  areas,  the  aquation  must 
be  modified.  This  equation  and  coefficients  a  and  b  are  based  on  data 
from  the  Army  derived  from  the  conputsr  program  D2PC  output. 

For  a  given  accident  sequence  the  spill  will  gsnsrsily  not  evspo- 
rate  to  completion  because  human  intervention  will  mitigate  the  spill  by 
covering  it  with  foam  or  soma  other  means.  In  such  s  case,  an  evapora¬ 
tion  rata  is  calculated  and  applied  until  the  time  estimated  for  mitiga¬ 
tion  or  cleanup  of  the  spill. 
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From  Eq.  7-2,  the  hourly  evaporation  rata  is 


■ev 


60  min 
lO^  min 


(7-3) 


where  m*v  haa  units  of  lb/h.  This  aquation  applies  whenever  the 
1/32-ln.  deep  spill  pool  area,  which  from  the  agent  density  is  about 
6  ft^  for  each  lb  of  spill,  is  smaller  than  the  actual  confined  pool 
area  (floor  or  sump). 


Where  a  auap  is  present,  ths  following  procedure  is  used  to  calcu¬ 
late  evaporation.  Initially,  the  apill  la  assumed  to  wet  the  entire 
sloped  floor  area.  Thus,  Eq.  7-3  Issued  for  a  10  min  time  period  with¬ 
out  modification  for  pool  area,  unless  ths  1/32-ln.  daap  pool  area  is 
larger  than  the  actual  floor  area.  Modification  conalsta  of  limiting 
M  in  Eq.  7-3  to  the  mesa  of  a  1/32-in.  layer  of  agent  over  the  actual 
floor  area.  After  10  min,  the  evaporation  rats  is  assumed  to  be  lim¬ 
ited  by  the  sunp  horixontal  cross  sectional  area  until  the  assumed  miti¬ 
gation/cleanup  time  when  it  drops  to  aero.  Such  limitation  amounts  to 
modifying  M  in  Eq.  7-3  to  the  mass  of  a  1/32-in.  layer  in  the  sump. 

7.1.3.  Detonations 

Ths  buratered  munitions  incorporate  proven  design  features  to  pre¬ 
clude  accidental  detonation  during  routine  handling.  The  impact  thresh¬ 
old  for  Initiating  detonation,  approximately  160  mph  (see  discussion  in 
Appendix  F),  is  well  above  ths  potential  impact  velocity  for  ell  acci¬ 
dents.  When  a  munition  is  subjected  to  an  impact  velocity  greater  than 
the  detonation  threahold  velocity,  there  is  still  a  low  probability  of 
detonation,  but  it  is  possible.  Data  doss  not  exist  to  develop  a  mean¬ 
ingful  ralationahlp  for  predicting  the  number  of  detonations  that  could 
occur  given  an  aircraft  crash  into  a  munitions  storage  area.  This 
rationale  is  that,  given  a  stack  of  munitions  pallets  in  storage  the 
munitions  in  the  first  row  would  absorb  scat  of  the  Impact  energy. 

These  nunitlons  could  detonate.  The  others  would  then  be  subjected  to 
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the  energy  of  the  detonations ,  as  vail  as  part  of  the  energy  of  the  air¬ 
craft  craah.  It  la  known  that  tha  datooatlona  do  not  propagate,  but  it 
is  assumed  that  many  of  than  would  ruptura.  This  logic  was  applied  to 
all  tha  aircraft  craah  scenarios  and  a  gensral  result  was  reached.  Tha 
conaarvativa  estimate  is  thatt 

1.  Fiftaan  parcant  of  tha  munitions  involved  in  tha  craah 
datonata. 

2.  Seventy  parcant  of  tha  ruptura  and  release  their  agent 
content. 

3.  Fifteen  percent  are  scattered  but  remain  Intact. 

For  impacts  of  bursterad  munitions  in  pallets,  if  a  single  munition 
detonation  occurs  it  is  assumed  to  ruptura  each  surrounding  munition  in 
the  pallet.  A  centrally  located  ounition,  which  baa  tha  largest  number 
of  surrounding  units,  is  conservatively  assuaad  to  be  the  one  which  det¬ 
onates,  even  though  it  is  lees  likely  to  detonate  at  this  location 
thanat  the  end.  For  projectiles,  cartridges,  and  mortars,  the  number  of 
adj scent  munitions  ruptured  is  five. 

For  rockets  and  mines  only,  the  detonation  of  more  than  one  muni¬ 
tion  was  calculated  to  be  credible  for  certain  pallet  impacts.  In  such 
cases,  two  rockets  detonate,  rupturing  13  adjacent  rockets.  Or,  three 
mines  detonate  rupturing  15  adjacent  munitions. 

7.1.4.  Firs  Release 

Munitions  subject  to  fire  can  fail  dua  to  tharmally  initiated  deto¬ 
nations  or  dua  to  hydraulic  ruptura.  It  la  assuaad  that  flras  in  diract 
contact  with  burstarad  munitions  will  ba  laft  unattsndad  and  allowed  to 
burn  until  all  combustible  materials  era  consumed .  Thus,  bursters  will 
detonate.  Some  neighboring  munitions  will  fail  dua  to  tha  datonation. 
The  failed  munitions  will  spill  combustibl#  agent  which  will  further 


fuel  Che  fire.  The  fire  will  spread,  leading  Co  aore  detonation*,  and 
•o  on. 

Tests  sc  GA  on  4. 2-in.  sorter  projectiles  end  8-in.  projectiles 
showed  thst  e  detonation  of  e  munition  in  e  close  pecked  array  will 
cause  the  munitions  adjacent  to  the  detonated  munition  to  break  and 
spill  their  agent  (Ref.  7-7).  Other  ounitions  not  in  direct  view  of  the 
detonated  munition  were  disheveled,  but  remained  intact.  Thus,  one 
detonation  is  not  sufficient  to  break  all  the  munitions  involved  in  the 
accident.  A  chain  reaction  must  taka  place.  The  bursters  in  the  neigh¬ 
boring  munitions  broken  by  a  detonation  will  be  subjected  to  more  rapid 
heating  than  those  of  an  Intact  ninition.  These  bursters  will  detonate 
at  a  critical  temperature,  but  it  is  aasuasd  that  detonation  of  a 
drained  minitlon  will  not  contribute  to  the  agent  release. 

Based  on  the  test  results  described  above,  it  is  inferred  that  all 
ounitions  in  direct  view  of  a  munition  detonation  m>uld  be  broken.  In  a 
rectangular  array,  typical  for  the  aunitlon  storage  configurations,  this 
results  in  an  agent  release  fraction  of  1/9  due  to  detonation  and  8/9  as 
a  liquid  spill.  An  Irregular  array,  such  as  would  exist  after  the  first 
detonation,  could  result  in  a  larger  release  fraction  due  to  detona¬ 
tions.  Therefore,  it  is  assumed  that  252  of  the  agent  release  is  due 
to  detonations  for  scenarios  involving  fire  and  detonations. 

It  is  assumed  that  fires  involving  nonburstered  munitions  will 
always  be  fought.  However,  when  an  accident  involves  a  large  fire,  the 
first  priority  may  be  to  contain  the  fire  and  prevent  its  spreading  into 
unaffected  areas.  For  conaarvatlsa,  a  large  fira  involving  nonburstered 
munitions  was  treated  as  in  the  case  for  burstered  munitions,  i.e.,  all 
combustible  materials  Involved  in  the  accident  are  consumed .  Whether 
burstered  or  nonburstered  min It ions  are  involved,  large  fires  were 
assumed  to  be  confined  to  one  building,  one  railcar,  or  one  truck,  as 
appropriate. 
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Agent  that  is  burned  la  basically  destroyed,  but  tha  daatruction 
la  uaually  incomp lata.  A  pravioua  analysis  (Ref.  7*8)  indicstad 
that  tha  recovery  of  undecomposed  agent  from  firaa  is  2.5Z  for  CB  and 
0.2X  for  VX.  Tha  analyela  was  baaad  on  tasta  at  Dugvay  Proving  Ground 
(Rafs.  7-9  and  7-10)  in  which  a  mock-up  igloo  with  11  pallets  of  rockets 
containing  GB  was  allowed  to  burn  to  completion.  Tha  unburaed  GB  vapor 
was  measured  by  a  grid  of  detectors  surrounding  tha  fire  at  30  m 
distance  and  extending  30  m  high.  Actual  tost  measurements  ware  made 
for  GB,  and  tha  results  for  VX  ware  derived  by  extrapolation  based  on 
the  boiling  teiqperature,  thermal  decomposition  temperature  and 
volatility  of  VX  relative  to  GB. 

Although  the  references  cited  above  provide  a  quantitative  data 
point  on  the  behavior  of  agent  in  a  large  fire  involving  an  igloo  or  a 
transport  vehicle,  there  are  several  reasons  to  Increase  the  predicted 
agent  release  fraction  for  fires.  These  aret 

1.  The  analytical  procedure  for  detecting  agent  during  the 
test  yielded  small  quantities  of  agent  distributed  over  a 
large  number  of  detectors.  The  saa^les  ware  analysed  by  the 
dianisidine-peroxide  method.  The  sensitivity  of  these  mea- 
suremsnts  is  expected  to  be  marginal  considering  the  short 
time  available  for  sampling  the  gas  cloud  as  it  passed  through 
the  detection  grid.  Therefore,  it  is  possible  that  a  signifi¬ 
cant  amount  of  agent  vapor  was  not  detected  during  the  test. 

2.  The  rockets  contain  a  large  amount  of  propellant,  which  in 
turn  contains  its  own  oxidiser.  The  propellant  burns  very 
quickly  and  tends  to  produce  a  hot  fire,  even  when  the  fire 
is  limited  by  the  amount  of  oxygen  present.  Fires  involving 
other  sainltions  may  burn  slower  and  at  a  lower  temperature, 
which  would  promote  a  higher  fraction  of  undestroyed  agent. 


3. 


In  oni  simulated  test  of  an  igloo  fir*  (R*f.  7-10)  four  rock¬ 
et*  were  launched  out  of  the  igloo.  On*  of  them  traveled 
1300  ft  away  from  the  igloo.  Hone  of  then  detonated  upon 
inpact,  but  they  all  broke  open  and  spilled  agent  onto  the 
ground.  When  on*  adds  the  liquid  spill  of  the  four  rockets 
that  escaped  from  the  igloo  to  the  2-1/22  agent  vapor  recov¬ 
ered,  the  total  agent  release  from  the  event  is  4.92. 

4.  The  analytical  extrapolation  to  determine  the  recovery  frac¬ 
tion  for  VI  is  not  documented .  Further,  the  uncertainty  of  an 
extrapolation  in  a  complex  thermal-chemical  rat*  process  is 
considered  to  be  large.  Although  the  chemical  properties  of 
VX  end  GB  suggest  that  the  recovery  frection  for  VX  should  be 
such  less  than  GB,  the  conclusion  that  the  recovery  of  VX 
would  be  62  times  the  recovery  of  GB  as  stated  in  Ref.  7-10  ia 
viewed  with  skepticism.  Therefore,  a  more  conservative  value 
of  232  was  assumed  for  the  recovery  factor  of  VX  versus  GB. 
Similarly,  the  chemical  properties  of  HD  suggest  that  an  ana¬ 
lytical  extrapolation  for  the  recovery  of  HD  would  also  be 
less  than  GB,  but  greater  than  VX.  Therefore,  a  value  of  302 
was  assumed  for  the  recovery  factor  of  HD  versus  GB. 

In  view  of  the  above  discussion,  the  release  fraction  for  unburned 
agent  GB  vapor  in  all  fir*  scenarios  was  assumed  to  be  102.  This  pro¬ 
vides  a  factor  of  two  over  the  4.92  combined  liquid  plus  vapor  measured 
in  the  test  to  allow  for  uncertainties  in  the  test  measurements  end 
uncertainties  in  the  liquid  agent  that  escapes  the  fir*.  The  corres¬ 
ponding  release  fractions  for  HD  and  VX  are  assumed  to  be  32  and  2-1/22, 
respectively.  These  relesss  fractions  are  not  considered  as  over  con¬ 
servatism.  The  mala  conservatism  arises  from  the  assumption  thst  all 
the  agent  inventory  is  involved  in  the  firs,  and  no  credit  is  taken  for 
the  possibility  that  the  fire  sd.ght  be  extinguished  before  all  combusti¬ 
ble  materials  are  consumed. 
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7.1.5.  Release  Duration 

Th«  accident  durations  assumed  for  this  risk  analysis  vara  chosan 
to  conservatively  dafina  a  tins  for  terminating  most  aeeidants  identi- 
fiad  in  this  analysis.  In  tha  scanarios  involving  liquid  spills,  tha 
accident  is  terminated  whan  tha  decontamination  taaa  has  successfully 
terminated  evaporation  of  agent  vapor  into  tha  ataosphara.  Army  experl- 
anca  in  handling  and  moving  chemical  monitions  indicates  that  may  of  the 
agent  spills  could  be  cleaned  up  much  quicker  than  tha  times  assumed 
herein.  However,  since  many  accidents  are  rate  events  and  have  not 
occurred  in  the  Army  experience  to  date,  conservative  times  for  the 
accident  durations  have  been  applied. 

The  agent  release  for  an  evaporative  spill  is  directly  proportional 
to  the  release  duration.  Therefore,  to  be  conservative,  the  release 
durations  were  estimated  on  th»  high  side.  The  release  durations 
assumed  arei 

1.  For  agent  spills  occurring  during  handling  caused  by  human  or 
equipment  malfunction,  the  release  duration  was  assumed  to  be 
1  h. 

2.  For  agent  spills  arising  from  an  aircraft  crash  with  no  fire, 
the  release  duration  was  assumed  to  be  4  h. 

3.  For  severe  external  events,  e.g.,  esrthquaka,  tornado,  air¬ 
plane  crash,  the  evaporation  time  vas  assumed  to  be  6  h. 

Table  7-1  lists  the  times  assumed  for  agent  release  for  the  acci¬ 
dent  scenarios  involving  fire  and/or  detonations. 

The  approach  to  deriving  the  assumed  release  durations  vas  to  group 
the  accident  scenarios  with  fire  or  detonations  into  sets  with  similar 
characteristics,  then  estimate  a  release  tims  ranging  from  10  min  to 


TABLE  7-1 

AGENT  RELEASE  DURATION  FOR  ACCIDENTS  INVOLVING  FIRE  AND  DETONATION 


Event 

Agent  Raleaaa 

Duration 

(min) 

Type  of  Event 

Fir*  only 

-  no  detonation* 

10 

Handling  vahid*  colliaion 

BO 

Aircraft  craah,  oateorit* 
atrike,  earthquake 

Fir*  with 

detonation 

20 

Aircraft  craah,  earthquake 

60 

Meteorite  atrike 

Detonation*  only 

Inatantaneoua 

Aircraft  craah 

/\V. 
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1  h.  For  accidents  involving  *  largo  fire,  it  vu  assumed  that  all  of 
tha  agant  present  ultimately  becomes  consumed  or  ralaaaad  aa  vapor.  The 
conaarvativa  approach  for  thaaa  caaaa  ia  to  assume  a  ahortar  duration 
than  expected  bacauaa  a  givan  ralaaaa  to  tha  atmosphere  ia  more  lathal 
ufaan  distributed  ovar  a  ahortar  tiaa  intarval.  Pactora  which  influanca 
tha  choica  of  time  parioda  ara  diacuaaad  below. 

Thara  ara  thraa  poaaibla  combinations  of  acanarioa  involving  fira 
and/or  datonationat 

1.  Datonationa  only. 

2.  Fira  and  datonationa. 

3.  Fira  only. 

7. 1.5.1.  Datonationa  Only.  Tha  acanarioa  that  fall  into  thla  category 
involve  a  high  velocity  impact,  auch  aa  an  aircraft  crash,  or  spurious 
detonation  arising  from  undua  forces  that  are  part  of  tha  accident  sce¬ 
nario,  a . g. ,  dropping  a  pallet.  It  is  known  that  ths  detonations  do  not 
propagate.  Therefore,  tha  ralaaaa  from  detonations  is  assumed  to  occur 
instantaneously. 

7. 1.5.2.  Fira  and  Detonations.  These  events  are  associated  with  exter¬ 
nal  storage  accidents.  For  soma  events,  there  is  a  source  of  external 
fuel,  e.g.,  an  airplane  crash.  In  these  scenarios,  tha  detonations  are 
propagated  by  tha  fire,  and  concurrently  the  detonations  allow 
additional  munition  failures  that  further  fuel  the  fira.  Tha  overall 
result  is  a  violent  conflagration.  Tha  total  duration  of  tha  accident 
may  be  an  hour  or  more;  however,  for  conservatism,  the  duration  of  the 
agent  release  is  assumed  to  be  20  min.  Tha  scenarios  not  included  in 
the  20-min  assumption  involve  a  meteorite  strike  into  a  storage  igloo  or 
into  a  temporary  atoraga  area.  In  this  case,  there  is  no  source  of 
external  fuel,  although  the  scenario  does  assume  that  fira  is  initiated, 
and  datonationa  are  propagated  by  tha  fira  until  all  combustible 
materials  ara  consumed.  Because  tha  meteorite  fire  starts  out 


relatively  localized  and  without  external  fuel,  the  releaae  duration  for 
the  neteorite  strike  is  assumed  to  be  1  h. 

7. 1.5. 3.  Fire  Only.  Events  involving  firo  only  occur  in  soma  storage 
accidents.  For  events  associated  with  handling  the  amount  of  agent 
involved  in  the  fire  is  relatively  small.  The  exposed  egent  is  allowed 
to  burn  to  coo?letion,  and  the  release  duration  is  assumed  to  be  10  min. 
Accidents  involving  external  events  Involve  large  quantities  of  agent. 
Therefore,  these  accidents  present  a  leas  difficult  situation  to  con¬ 
trol.  The  agent  release  duration  for  these  events  was  assumed  to  be 
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7.2.  APPLICATION  TO  ACCIDENT  SEQUENCES 

This  ssction  illustrstss  ths  application  of  ths  rslssss  methodology 
to  determine  agent  rslsssss  for  ths  specific  accidsnt  sequences.  It  is 
not  intsndsd  to  encompass  all  ssqusncss.  Appendix  X  praasnts  ths  sgsnt 
rslsssss  for  all  ssqusncss.  Tab la  7*2  givss  ths  munition  and  pallst 
invsntoriss.  Dstails  of  all  agsnt  rslssss  calculations  ara  contained  in 
ths  supporting  calculations  for  this  risk  assessment,  Ref.  7-11. 

7.2.1.  Warehouse  Storage  Rslssss  During  Earthquakes 

There  are  three  sites  with  stored,  nonburstsrsd  munitions  in  ware¬ 
houses  .  These  arst 

1.  UMDA  -  ton  containers  with  agsnt  HD  stored  in  two  warehouses. 

2.  NAAP  -  ton  containers  with  agent  VX  stored  in  one  warehouse. 

3.  TEAD  -  spray  tanks  with  agent  YX  stored  in  two  warehouses. 

Only  spray  tanks  and  ton  containers  are  stored  in  warehouses,  none 
of  which  contain  agent  GB.  Based  on  their  impact  characteristics,  the 
ton  containers  are  predicted  to  be  able  to  be  crushed  or  breeched  by  the 
kinetic  energy  of  a  falling  I -beam  if  the  warehouse  structure  is  dam¬ 
aged.  Each  I-beam  has  sufficient  energy  to  crush  one  ton  container  but 
not  two.  Thus,  the  maximum  number  of  ton  containers  crushed  per  ware¬ 
house  is  five,  since  there  are  that  many  I-beams  in  the  warehouse  roof. 
For  similar  reasons,  the  maximum  number  punctured  is  taken  to  be  five 
per  warehouse. 

Spray  tanks  are  stored  in  overpacks  and,  based  on  structural 
calculations,  are  not  expected  to  be  breached  by  the  falling  I-beams. 
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TABLE  7-2 

INVENTORY  DATA  FOR  MUNITIONS  AND  PALLETS 


Munition/ Agant 

Typa 

Munition  Inventory 
(lb) 

No.  Munition* 
Per  Pallet 

Bomb 

GB 

220.0 

2 

Mortar 

H 

6.0 

48 

105  cartridge 

GB 

1.6 

24 

U 

3.2 

24 

Ton  containar 

GB 

1500.0 

1 

U 

1700.0 

1 

vx 

1600.0 

1 

Mina 

VX 

10.5 

36 

155  projectile 

GB 

6.5 

8 

H 

11.7 

8 

VX 

6.0 

8 

8-in.  projectile 

GB 

14.5 

6 

VX 

14.5 

6 

Rocket 

GB 

10.7 

15 

VX 

10.0 

15 

Spray  tank 


Consequently ,  the  mechanical  breeching  of  spray  tanks  due  to  an  earth¬ 
quake  is  not  considered  a  credible  event.  If  a  fire  lasts  beyond 
30  min,  apray  tanks  may  fail  due  to  the  unsuppressed  fire.  Thus,  for 
spray  tanks,  only  one  type  of  release  is  considered,  namely  burning  of 
one  or  two  warehouse  inventories  due  to  fire  beyond  30  min.  The  release 
fraction  due  to  unburnt  VX  agent  in  this  case  is  2.5X,  as  in  other  acci¬ 
dent  scenarios. 

For  ton  containers,  three  release  types  were  considered) 

1.  Evaporation  of  agent  spilled  due  to  mechanical  breach  of  one 
to  five  containers  per  warehouse. 

2.  Burning  of  agent  spilled  from  breached  containers. 

3.  Burning  of  the  entire  inventory  in  the  warehouse,  starting  at 
30  min. 


The  evaporative  release  rate  is  not  limited  by  the  floor  area, 
which  is  tens  of  thousands  of  square  feet  per  warehouse.  Thus,  the 
evaporative  release  rate,  m,v,  is  given  by  Eq.  7-2.  For  10-ton  con¬ 
tainers  with  agent  HO,  M  ■  17,000  lb  and  a  *  451  and  b  *>0.1.  Thus, 

*0.85  lb/h  for  10  containers.  This  rate  of  HD  release  is  negligi¬ 
ble.  Therefore,  evaporative  release  of  spilled  HD  from  breached  muni¬ 
tions  is  negligible.  For  agent  VX,  the  maxlaaim  number  of  breached  ton 
containers  is  five.  In  this  limiting  case,  M  ■  8000  lb  and  e  *>  49,000, 
b  *>  0.12.  Thus,  m,v  •  0.003  lb/h  for  five  breached  containers.  This 
rate  of  release  is  negligible. 

The  second  and  third  types  of  releases  Involve  burning  of  spilled 
agent  from  breached  containers  or  burning  of  all  ton  containers  due  to  a 
lack  of  fire  suppression.  For  these  cases,  the  release  consists  of  the 
product  of  the  appropriate  inventory  and  the  fire  release  fraction,  F. 
Here,  F  ■  0.025  for  agent  VX  and  F  *  0.05  for  agent  HD,  consistent  with 
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data  described  above.  No  credit  la  taken  for  agent  vapor  retention  by 
the  warehouse  building,  even  if  It  le  not  structurally  damaged  by  the 
earthquake,  because  It  is  not  designed  with  a  containment  function. 

As  described  in  Section  5,  an  event  tree  was  analysed  for  the  stor¬ 
age  of  ton  containers  at  the  UMDA  and  NAAP  site  warehouses.  For  the 
UMDA  site,  there  were  17  release  sequences  with  frequencies  above 
10~10/yr.  Table  7-3  lists  these  sequences  along  with  the  information 
pertinent  to  the  release  calculations.  For  sequences  in  which  the  burn¬ 
ing  or  agent  spilled  from  breached  munitions  is  the  only  release  mode,  a 
range  of  release  ie  given  corresponding  to  the  range  of  containers 
breached  (1  to  5  or  2  to  10).  For  sequences  in  which  the  nonsuppressed 
fire  ignites  the  entire  warehouse  inventory,  the  number  of  breached 
containers  is  unimportant. 

Table  7-4  presents  the  corresponding  release  results  for  ton 
containers  stored  at  the  NAAF  site.  Only  five  sequences  are  inq>ortant 
since  there  is  only  one  warehouse  at  the  site.  The  maximum  masses  of 
agent  VX  released  from  this  site  are  seven  times  lower  than  maximum  mass 
releases  of  agent  HD  from  UMDA. 

In  the  event  tree  for  epray  tanks  stored  at  the  TEAD  site,  there 
were  six  significant  sequences  as  given  in  Table  7-5.  Since  no  spray 
tanks  arc  mechanically  breached,  the  only  consequence  variable  is 
whether  the  unsuppressed  fire  is  not  suppressed  in  one  or  both  ware¬ 
houses.  The  releases  upon  burning  of  the  entire  inventory  at  one  or 
both  warehouses  are  given  in  Table  7-5.  They  are  8  to  16  times  lower 
than  the  maximum  release  of  the  seme  agent  (VX)  from  the  NAAP  site. 

7.2.2.  Uncertainties 


No  uncertainty  analysis  was  performed  for  the  agent  release  anal¬ 
ysis.  The  releases  reported  are  treated  as  conservative  estimates, 
rather  than  central  estimates,  since  they  ere  based  on  assumptions  which 


TABLE  7-3 

HD  RELEASES  PROM  TON  CONTAINERS  STORED  IN 
UMDA  WAREHOUSES  DURING  EARTHQUAKES ( * ) 


Mo.  of 

No .  Warehouses 

Release 

Sequence 

Munitions 

Spilled  Munition 

In  Which  Entire 

To  Atmopshere 

ID 

Damaged 

Agent  Burns 

Inventory  Burns 

(lb) 

SLKHF281 

SLKHF282 

SLKHC283 

SLKHF284 

SLKHF285 

SLKHF286 

SLKHC287 

SLKHF288 

SLKHF289 

SLKHC2810 

SLKHF2811 

SLKHF2812 

SLKHC2813 

SLKHF281') 

SLKHf 2815 

SLKHC2816 

SLKHF2817 


1-5 

No 

1-5 

Tes 

1-5 

No 

1-5 

Yes 

2-10 

No 

2-10 

Tes 

2-10 

Tes 

1-5 

No 

1-5 

Tes 

1-5 

Tes 

2-10 

No 

2-10 

Tes 

2-10 

Tes 

2-10 

No 

2-10  Tes 

2.7  x  105 
5»A  x  105 
6<b) 

2.7  x  105 

2.7  x  105 
5. A  x  105 
« 

2.7  x  10* 
5. A  x  105 
e 

2.7  x  105 
5. A  x  105 
e 

2.7  x  105 
5. A  x  105 
e 

5. A  x  105 


'*) Agent  inventory  •  5. A  x  10®  lb  per  warehouse,  assuming  warehouse 
is  full. 


negligible  (below  14  lb). 


TAILS  7-4 

AGENT  VX  RELEASES  FROM  NAAP  WAREHOUSE  TON 
CONTAINERS  DvRING  EARTHQUAKES (•> 


No.  of  Release 

Sequence  Munition*  Spillad  Munition  Entir*  Warehouse  To  Atmosphere 


ID 

Damaged 

Agent  Burns 

Inventory  Burns 

(lb) 

SLKVF261 

0 

-- 

Tes 

7.5  *  104 

SLKVC262 

1-5 

No 

No 

e<b) 

SLKVF263 

1-5 

Tea 

Tes 

7.5  x  104 

SLKVC264 

1-5 

No 

No 

e 

SLKVF265 

1-5 

Tes 

Tes 

7.5  X  104 

Warehouse  inventory  ■  3  x  10b  lb  of  VX,  assuming  warehouse  is 

full. 

•  negligible  (below  0.3  lb). 
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TABLE  7-5 

AGENT  VX  RELEASE  FROM  SPRAT  TANKS  STORED  AT 
TEAD  WAREHOUSES  DURING  EARTHQUAKES <*> 


Sequence 

ID 

No.  Warehouses 

In  Which  Entire 
Inventory  Burns 

Releese 

To  Atmosphere 
(lb) 

SLSVF271 

1 

4.5  X  103 

SLSVF272 

2 

9.0  *  103 

SLSVF273 

1 

4.5  *  103 

SLSVF274 

2 

9.0  *  103 

SLSVF275 

i 

4.5  x  103 

SLSVF276 

2 

9.0  x  103 

(•) Agent  inventory  ■  1.79  z  10*  lb  of  VX, 


assuming  warehouse  is  full. 
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ara  oft«n  consorvatlva .  Exaoplaa  arai  (1)  uaa  of  aarly  thraaholda  of 
munition  failura  ralativa  to  tha  data  (Appandlx  P),  (2)  worat-caaa  num- 
bar  of  adjacaat  munition  rupturaa  for  a  ounltion  datonation  in  a  pallat, 
(3)  uaa  of  maximum  rathar  than  avaraga  invantoriaa,  and  (4)  uppar  bound 
fira  ralaaaa  factors,  ralativa  to  tha  data. 
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8.  RESULTS 


The  analysis  of  tha  potential  for  agent  ralaasa  to  the  atmosphere 
from  accident  acenarioa  related  to  the  continued  storage  alternative 
included  storage  and  handling  activities.  This  section  discusses  some 
of  tha  accident  probability  and  agent  release  results  associated  with 
these  activities. 

Tha  results  of  tha  analysis  of  the  various  activities  encompassing 
the  continued  storage  alternative  cannot  be  presented  in  the  same  units* 
i.e.,  annual  frequencies,  because  of  the  possible  divulgence  of  clas¬ 
sified  information.  This  is  only  posaii  le  for  some  storage  accident 
scenarios.  For  accident  scenarios  related  to  the  handling  activities, 
the  unclassified  portion  of  the  probabilistic  analysis  is  given  in  terms 
of  frequency  of  accidents  per  pallet  of  munitions  (or  as  a  container  of 
munitions ) . 

The  evaluation  of  the  actual  risk  to  the  public  and  environment 
requires  agent  dispersion  calculations  which  are  not  in  the  scope  of  the 
study  reported  here.  Despite  this  limitation,  the  results  discussed 
herein  still  provide  useful  insights  on  the  contributions  of  the  various 
disposal  activities  to  the  risk  of  an  agent  release.  These  insights  are 
discussed  below. 

8.1.  ACCIDENT  SCENARIOS  DURING  STORAGE 

The  continued  storage  alternative  requires  some  storage  of  muni¬ 
tions  in  their  existing  location. 
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8.1.1.  Internal  Events 


Thara  vara  no  algnificant  intarnal  avant  initiators  of  accidents 
during  atoraga.  Par  unit  operation,  forklift  drop  accidanta  occur  more 
frequently  than  forklift  tina  punctures.  Also,  the  use  of  a  lifting 
beam  instead  of  a  tina  leads  to  an  order  of  magnitude  dacraaae  in  drop 
frequency. 

8.1.2.  External  Events 


These  events  involve  accidents  caused  by  natural  phenomena  or  human 
activity  affecting  munitions  in  storage  igloos,  open  storage  areas, 
holding  areas,  or  warehouses.  If  these  are  assumed  to  be  full  of 
munitions,  the  agent  Inventories  range  up  to  100,  200,  1000,  and  2000 
tons,  respectively,  for  storage  igloos,  holding  areas,  open  areas,  and 
warehouses.  The  most  frequent  external  accidents  having  significant 
release  Involve  mild  intensity  earthquakes  or  small  airplane  crushes 
(order  depending  on  site).  Amount e  of  available  agent  inventories 
released  in  these  events  are  on  the  order  of  fractions  of  one  percent  or 
less  (munition  punctures,  drops,  etc.). 

The  largest  releases  occur  for  a  large  aircraft  crash,  a  meteorite 
strike,  or  a  severe  earthquake,  especially  when  a  warehouse  (at  NAAP, 
THLAD,  or  0MDA)  is  involved.  These  can  result  in  up  to  10  percent  of 
the  agent  inventory  released  for  scenarios  involving  a  fire  which  has 
the  potential  (duration)  for  destroying  the  entire  inventory  of  an  igloo 
or  warehouse.  The  munitions  stored  in  warehouses  contain  only  VX  or 
mustard  which  have  much  elower  evaporation  rates  than  GB  and  hence  are 
not  easily  dispersed  into  the  atmosphere.  Thus,  warehouse  scenarios 
involving  only  spills  are  not  significant  risk  contributors.  The  ware¬ 
house  at  UMDA  has  the  potential  for  the  largest  release.  Meteorite 
strike-initiated  sequence  median  frequencies  are  one  to  two  orders  of 
magnitude  lower  than  the  aircraft  crash-induced  sequence  frequencies. 

As  expected,  munitions  stored  outdoors  are  generally  more  susceptible  to 
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large  aircraft  crashes  than  those  stored  in  warehouses  or  igloos,  but 
releases  are  lowar.  Both  APG  and  PBA  have  ton  containers  stored  out¬ 
doors,  and  the  aircraft  crash  probabilities  at  these  sites  are  somewhat 
higher  than  at  the  other  sites.  Igloos  appear  to  provide  only  minimal 
protection  from  direct  crashes  of  large  planes,  but  releases  are  an 
order  of  magnitude  lower.  The  releases  are  more  severe  if  buratered 
munitions  are  involved. 


8.2.  ACCIDENT  SCENARIOS  D'JRING  HANDLING 


Included  in  the  handling  analysis  are  single  munition  or  pallet 
movements  by  hand,  forklift,  or  other  equipment. 

The  results  indicate  that  dropped  munitions ,  whether  in  pelletized 
form  or  not,  occur  more  frequently  than  either  forklift  tine  puncture  or 
forklift  collision  accidents.  In  fact,  the  frequency  of  forklift  colli¬ 
sion  accidents  which  lead  to  the  munitions  falling  off  the  forklift  is 
an  order  of  magnitude  lower  than  the  drop  accidents.  Furthermore,  the 
type  of  clothing  an  operator  is  wearing  while  handling  these  munitions 
influence  the  drop  frequency  value.  An  operator  wearing  Level  A  cloth¬ 
ing  is  more  likely  cc  eoumlt  an  error  that  would  cause  the  munition  to 
be  dropped  than  when  he  is  wearing  more  comfortable  clothing. 

For  bare  munitions,  the  rockets  seem  to  be  the  most  prone  to  punc¬ 
tures  from  drops  or  forklift  tine  accidents. 

Bulk  items  that  are  punctured  lead  to  larger  releases  than  other 
munitions  such  as  projectiles  or  rockets.  Bombs  are  of  concern  because 
they  contain  GB  which  evaporates  more  readily  than  the  other  agent 
types.  The  agent  vapor  releases  range  up  to  170  lb  (thermal  failure  of 
ell  munitions  in  e  pallet). 

Handling  accldante  which  laad  to  eignif leant  agant  ralaases  (in 
particular,  agant  GB)  ara  dominant  riak  contributors  because  of  the 
relatively  higher  annuel  frequency  values.  Of  course  depending  on  the 
actual  munition  inventory,  the  value  of  annual  frequency  may  either 
increase  or  decrease  when  converted  to  the  more  meaningful  par  stockpile 
basis . 
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8.3.  UNCERTAINTIES  IN  THE  ANALYSIS 
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In  assessing  the  risks  associated  with  th«  CSDP  alternatives,  every 
effort  wea  made  to  perform  beat-estimate  analyses,  i.e.,  "realistic" 
evaluation  and  quantification  of  the  accident  sequence  frequencies  and 
associated  agent  releases.  The  use  of  pessimistic  or  conservative 
modeling  techniques  or  data  for  quantification  violates  the  intent  of 
the  probabilistic  nature  of  the  study.  Realistic  modeling  and  quanti¬ 
fication  permits  a  balanced  evaluation  of  risk  contributors  and  compari¬ 
son  of  alternatives.  However,  for  realistic  or  best-estimate  calcula¬ 
tions,  the  obvious  concern  is  the  accuracy  of  the  results.  Uncertainty 
analysis  addresses  this  concern. 

8.3.1.  Sources  of  Uncertainty 

Since  the  event  sequences  discussed  in  Section  S.3  have  not 
actually  occurred,  it  is  difficult  to  establish  the  frequency  of  the 
sequence  and  associated  consequences  with  great  precision.  For  this 
reason,  many  parameters  in  a  risk  assessment  are  treated  as  probabilis¬ 
tically  distributed  parameters,  so  that  the  computation  of  sequence  fre¬ 
quencies  and  resulting  consequences  can  involve  the  probabilistic  combi¬ 
nation  of  distributions. 

There  are  three  general  types  of  uncertainty  associated  with  the 
evaluations  reported  in  this  document!  (1)  modeling,  (2)  data,  and 
(3)  completeness. 

There  exist  basic  uncertainties  regarding  the  ability  of  the  vari¬ 
ous  models  to  represent  the  actual  conditions  associated  with  the 
sequence  of  events  for  the  accident  scenarios  that  can  occur  in  the 
storage  and  disposal  activities.  The  ability  to  represent  actual  phe¬ 
nomena  with  analytical  models  is  always  a  potential  concern.  The  use  of 
fundamental  models  such  as  fault  trees  and  event  trees  is  sometimes  sim¬ 
plistic  because  most  events  depicted  in  these  models  are  treated  as 
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leading  to  on«  of  two  binary  atataa:  success  or  fallura  (l.e.,  partial 
successes  or  failures  are  ignored).  Model  uncertainties  are  difficult 
to  quantify  and  are  addressed  in  this  study  by  legitimate  efforts  of  the 
analysts  to  stake  the  models  as  raalistic  as  possible.  Where  such  real¬ 
ism  could  not  be  achieved,  conservative  approaches  were  taken. 

No  uncertainty  from  oversights,  errors,  or  omission  from  the  models 
used  (e.g.,  event  trees  and  fault  tress)  is  included  in  the  uncertainty 
analysis  results.  Including  these  uncertainties  is  beyond  the  state-of- 
the-art  of  present  day  uncertainty  analysis. 

The  uncertainties  in  the  assignment  of  event  probabilities  (e.g., 
component  failure  rates  and  initiating  event  frequencies)  are  of  two 
types:  intrinsic  vsrlabillty  and  lack  of  knowledge.  An  example  of 
intrinsic  variability  ia  that  where  the  available  experience  data  is  for 
a  population  of  similar  components  in  similar  environments,  but  not  all 
the  components  exhibit  the  same  reliability.  Intrinsic  variations  can 
be  caused,  for  example,  by  different  manufacturers,  maintenance  prac¬ 
tices,  or  operating  conditions.  A  second  example  of  intrinsic  variabil¬ 
ity  is  that  related  to  the  effects  of  long-term  storage  on  the  condition 
of  the  munitions  as  compared  to  their  original  configuration.  Lack  of 
knowledge  uncertainty  is  associated  with  cases  where  the  model  parameter 
is  not  a  random  or  fluctuating  variable,  but  the  analyst  simply  does  not 
know  what  the  value  of  the  parameter  should  be.  Both  of  these  data 
uncertainty  types  are  encountered  in  this  study. 

8.3.2.  Uncertainties 

The  sequence  frequency  results  discussed  in  this  report  are  pre¬ 
sented  in  terms  of  a  median  value  and  a  range  factor  of  a  probability 
diatribution  representing  the  frequency  of  interest.  The  range  factor 
represents  the  ratio  of  the  95th  percentile  value  of  frequency  to  the 
50th  percentile  (l.e.,  median)  value  of  frequency.  The  uncertainty  in 
the  sequence  frequency  is  determined  using  the  STADIC-2  program 


(Ref.  8-1)  to  propagate  the  uncertainties  associated  with  each  of  the 
events  in  the  fault  trees  or  event  trees  through  to  the  end  result. 

Some  scenarios,  such  as  those  associated  with  tornado  missiles  and  low- 
impact  detonations  have  rather  large  uncertainties.  The  difficulty  wirli 
tornado-generated  missiles  lies  with  the  difficulty  in  accurately  model¬ 
ing  the  probability  that  the  missile  will  be  in  the  proper  orientation 
to  penetrate  the  munition  and  in  predicting  the  number  of  missiles  per 
square  foot  of  wind.  The  difficulty  with  the  low-impact  detonations 
lies  with  the  sparse  amount  of  data  available  and  its  applicability  to 
the  scenarios  of  interest.  In  general,  uncertainties  tend  to  be  large 
when  the  amount  of  applicable  data  is  small  end  vice  versa. 
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REFERENCE  LIST  OF  ACCIDENT  SEQUENCES 


A. 
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A  reference  list  of  accident  sequences  is  presented  here.  Accident 
sequences  releted  to  storage  ere  presented  first  followed  by  handling 
activities  releted  to  surviellance  end  maintenance.  The  sequences  can 
be  identified  by  the  coding  scheme  presented  in  Section  4  of  this  docu¬ 
ment.  Following  the  sequence  ID,  a  brief  description  of  the  accident  is 
given  along  with  an  indication  as  to  whether  or  not  the  sequence  was 
coriidered  for  further  analysis.  The  bases  for  scenario  screening  are 
provided  in  the  logic  model  section.  Section  4,  of  the  main  body  of  this 
report. 


ACCIDENT  SEQUENCES  FOR  LONG-TERM  STORAGE 


Considered 


Sequence  for  Further 

ID  Sequence  Description  Anelysie 

SL1  Munition  develops  s  leek  during  the  in-betveen  Yes 

Inspection  period. 

SL2  Munition  punctured  by  forklift  tine  during  Ye9 

leeker-hendling  activities. 

SL3  Spontaneous  ignition  of  rocket  during  storage  (not  No 

analyzed  for  lack  of  quantitative  data). 

SL4  Large  aircraft  direct  crash  onto  storage  area;  Yes 


fire  not  contained  in  30  min.  (Notet  Assume 
detonation  occurs  if  burstered  munitions  hit; 
fire  involving  burstered  munitions  not  contained 
at  all.) 

SL5  Large  aircraft  indirect  crash  onto  storage  area;  Yes 

fire  not  contained  in  30  min.  (See  note  in  SL4 . ) 

SL6  Tornado-generated  missiles  strike  the  storage  Yes 

magazine,  warehouse,  or  open  storage  area;  muni¬ 
tions  breached  (no  detonation). 

SL7  Severe  earthquake  breaches  the  munitions  in  stor-  Yes 

age  igloos;  no  detonations. 

SL8  Meteorite  strikes  the  storage  area;  firs  occurs;  Yes 

munitions  breeched  (if  burstered,  detonation  also 
occurs) . 

SL9  Munition  dropped  during  leaker  isolation  oper-  Yes 

ation;  munition  punctured. 

SL10  Storage  igloo  or  warehouse  fire  from  internal  No 

sources. 

SL11  Munitions  are  dropped  due  to  pallet  degradation.  No 

SL12  Liquid  petroleum  gas  (LPG)  Infiltrates  igloo/  No 

building. 

SL13  Flerznable  liquids  stoted  in  nearby  facilities  No 

explode;  fire  propagates  to  munition  warehouse 
(applies  to  NAAP). 

*  %  • 
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ACCIDENT  SEQUENCES  FOR  LONG-TERM  STORAGE  (Continued) 


Sequence 

ID 

Sequence  Description 

Considered 
for  Furthe; 
Analysis 

SL14 

Tornado-induced  building  collapse  leads  to 
breaching/detonetion  of  min it Iona. 

No 

SL15 

Small  aircraft  direct  crash  onto  warehouse  or 
open  storage  yard;  fire  occurs;  not  contained 
in  30  min. 

Yes 

SL16 

Large  aircraft  direct  crash;  no  fire;  detonation 
(if  burstered). 

Yes 

SL17 

Large  aircraft  direct  crash;  fire  contained 
within  30  min  (applies  to  nonburstered  munitions 
only) . 

Yes 

SL18 

Small  aircraft  direct  crash  onto  warehouse  or 
open  storage  yard;  no  fire. 

Yes 

SL19 

Small  aircraft  direct  crash  onto  warehouse  or 
open  storage  yard;  fire  contained  in  30  min. 

Yes 

SL20 

Large  aircraft  Indirect  crash  onto  storage  area; 
no  fire. 

Yes 

SL21 

Large  aircraft  indirect  crash  onto  storage  area; 
fire  contained  in  30  min. 

Yes 

SL22 

Sayers  earthquake  leads  to  munition  detonation. 

Yes 

SL23 

Tornado-generated  missiles  strike  the  storage 
igloo  and  leads  to  munition  detonation. 

Yes 

SL24 

Lightning  strikes  ton  containers  stored  outdoors. 

Yes 

SL25 

Munition  dropped  during  leaker  isolation;  muni¬ 
tion  detonates. 

Yes 

SL261 

Earthquake  occurs;  NAAP  warehouse  is  Intact;  no 
ton  containers  damaged;  fire  occurs. 

Yes 

SL262 

Earthquake  occurs;  M.V.P  warehouse  is  intact;  ton 
container  damaged;  *-r  lire. 

Yes 

S1263 

Earthquake  occurs;  warehouse  is  intact;  ton 

container  damaged;  fire  occurs. 

Yes 
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ACCIDENT  SEQUENCES  FOR  LONG-TERM  STORAGE  (Continued) 


Considered 

Sequence  for  Further 

ID  Sequence  Description  Analysis 

SL264  Earthquake  occurs;  NAAP  warehouse  is  damaged;  ton  Tea 

containers  damaged;  no  fire. 

SL265  Earthquake  occurs;  NAAP  warehouse  is  damaged;  ton  Tea 

containers  damaged;  fire  occurs. 

S1271  Earthquake  occurs;  TEAD  warehouses  intact;  muni-  Yes 

tions  intact;  fire  occurs  at  one  warehouse. 

SL272  Earthquake  occurs;  TEAD  warehouses  intact;  muni-  Yes 

tions  Intact;  fire  occurs  at  two  warehouses. 

SL273  Earthquake  occurs;  one  TEAD  warehouse  is  damaged;  Yes 

munitions  intact;  fire  occurs  at  one  warehouse. 

SL274  Earthquake  occurs;  one  TEAD  warehouse  is  damaged;  Yes 

munitions  Intact;  fire  occurs  at  two  warehouses. 

SL275  Earthquake  occurs;  two  TEAD  warehouses  damaged;  Yes 

munitions  intact;  fire  occurs  at  one  warehouse. 

SL276  Earthquake  occurs;  two  TEAD  warehouses  demaged;  Yes 

munitions  intact;  fire  occurs  at  two  warehouses. 

SL281  Earthquake  occurs;  UMDA  warehouses  intact;  muni-  Yes 

tions  intact;  fire  occurs  at  one  warehouse. 

$1,282  Earthquake  occurs;  UMDA  warehouses  intact;  muni-  Yes 

tions  intact;  fire  occurs  at  two  warehouses. 

SL283  Earthquake  occurs;  UMDA  warehouses  intact;  muni-  Yes 

tions  in  one  warehouse  damaged;  no  fire  occurs. 

SL284  Earthquake  occurs;  UMDA  warehouses  intact;  muni-  Yes 

tions  in  one  warehouse  damaged;  fire  occurs  at 
warehouse  with  damaged  munitions. 

SL283  Earthquake  occurs;  UMDA  warehouses  intact;  muni-  Yes 

tions  in  one  warehouse  damaged;  fire  occurs  at 
warehouse  with  undamaged  munitions. 

SL286  Earthquake  occurs;  UMDA  warehouses  intact;  muni-  Yes 

tions  in  one  warehouse  damaged;  fire  occurs  at 
two  warehouses. 
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ACCIDENT  SEQUENCES  FOR  LONG-TERM  STORAGE  {Continued) 


Sequence 

ID 

Sequence  Description 

Considered 
for  Further 
Analysis 

SL287 

Earthquake  occurs!  OMDA  warahousas  intact;  muni¬ 
tions  in  two  warahousas  damaged;  no  fire  occurs. 

Tea 

SL288 

Earthquake  occurs;  OMDA  warehouses  intact;  muni¬ 
tions  in  two  warehouses  damaged;  £ire  occurs  at 
Vitthoust  with  di&Agtd  munition* • 

Yes 

SL289 

Earthquake  occurs;  OMDA  warehouses  intact;  muni¬ 
tions  in  two  warehouses  damaged;  fire  occurs  at 
two  warehouses. 

Yes 

SL2810 

Earthquake  occurs;  one  UMDA  warehouse  damaged; 
munitions  in  one  warehouse  damaged;  no  fire 
occurs. 

Yes 

SL2811 

Earthquake  occurs;  one  OMDA  warehouse  demaged; 
munitions  in  one  warehouse  damaged;  fire  occurs 
at  warehouse  with  damaged  munitions. 

Yes 

SL2812 

Earthquake  occurs;  one  OMDA  warehouse  damaged; 
munitions  in  one  warehouse  damaged;  fire  occurs 
at  two  warehouses. 

Yes 

SL2813 

Earthquake  occurs;  one  OMDA  warehouse  damaged; 
munitions  in  two  warehouses  damaged;  no  fire 
occurs . 

Yes 

SL2814 

Earthquake  occurs;  one  OMDA  warehouse  damaged; 
munitions  in  two  warehouses  damaged;  fire  occurs 
warehouse  with  damaged  munitions. 

Yes 

SL281S 

Earthquake  occurs;  one  OMDA  warehouse  damaged; 
munitions  in  two  warehouses  damaged;  fire  occurs 
at  two  warehouses. 

Yes 

SL2816 

Earthquake  occurs;  two  OMDA  warehouses  damaged; 
munitions  in  two  warehouses  damaged;  no  fire 
occurs . 

Yes 

SL28I7 

Earthquake  occurs;  two  OMDA  warehouses  damaged; 
munitions  in  two  warehouses  damaged;  fire  occurs 
at  both  warehouses. 

Yes 

ACCIDENT  SEQUENCES  FOR  SURVEILLANCE  AND  MAINTENANCE 
HANDLING  ACTIVITIES 


Sequence 

ID 


Sequence  Description 


Considered 
for  Further 
Analysis 


SHI 

Drop  of  pallet  or  container  in  storage  area  or 
maintenance  facility;  munition  punctured. 

Yes 

SH2 

Forklift  collision  vith  short  duration  fire. 

Yes 

SH3 

Forklift  tine  puncture 

Yes 

SH4 

Forklift  collision  without  fire. 

Yes 

SH5 

Drop  of  munition  leads  to  detonation. 

Yes 

SH6 

Collision  accident  leads  to  detonation. 

Yes 

SH7 

Collision  accident  vith  prolonged  fire. 

Yes 

SH8 

Munition  pellet  dropped  during  pallet  inspection. 

Yes 

SH9 

Forklift  tine  puncture  during  pallet  inspection. 

Yes 

SH10 

Forklift  collision  during  pallet  inspection. 

Yes 

SHI  1 

Munition  pallet  dropped  during  pallet  Inspection; 
detonation  occurs. 

Yes 

SHI  2 


Forklift  collision;  detonation  occurs. 
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C.l.  STRUCTURAL  ANALYSIS 

This  appsndix  summarises  th«  structural  analysis  methodology  used 
to  determine  failure  thresholds  and  probabilitias  for  ainltlooa  and 
structures.  Supporting  calculation  for  tha  results  used  in  this  study 
can  be  found  in  Ref.  C-l. 

C .  1 . 1 .  PUNCTURE 

This  section  addresses  tvo  types  of  mwltion  punctures  (1)  punc¬ 
ture  due  to  dropping  a  munition}  and  (2)  forklift  puncture. 

C.  1.1.2.  Puncture  Due  to  Drop 

The  probability  Pr  of  a  sainition  puncturing  on  impact  with  a  probe 
depends  on  the  type  of  munition,  the  number  of  probes  to  which  a  dropped 
munition  is  exposed,  and  the  geometry  of  the  probe.  This  probability  is 
computed  from  the  followings 

Pf  •  ?i  x  PLL  x  PD  x  A*  , 

where  Pg  ■  probe  density  (number  of  probes  pci  square  foot  of  surface 

area), 

PLL  ■  an  adssslsaible  probability  valua  for  probs  langth  to  diamatar 
ratio, 

PD  •  an  admissible  probability  valua  for  probe  diamatar, 
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Aj  •  the  araa  of  the  munition  in  equere  feet  which  is  subject  to 
penetration  by  the  probe. 


The  number  of  probes  per  square  foot  of  surface  area  (Pg)  is  based 
on  engineering  Judgment.  It  is  assumed  that  the  igloo  is  clean  and  that 
objects  that  could  be  potential  probes  are  not  likely  to  be  left  in  the 
igloo.  Therefore,  one  probe  per  igloo  (i.e.,  one  probe  per  2160  ft?) 
was  assumed  for  igloo  storage.  Por  all  other  storage  areas,  a  probe 
density  of  one  per  1000  ft?  was  assumed.  In  the  general  working  area, 
loading  docks,  etc.,  it  is  assumsd  that  the  potential  for  probes  will  be 
much  more  likely  than  in  an  igloo.  Probes  such  as  posts,  tools,  rocks, 
or  chunks  of  steel  ere  possible;  therefore,  one  probe  per  100  ft?  is 
assumed  for  the  general  working  area.  In  the  UP A  during  an  earthquake, 
it  is  assumed  that  the  earthquake  could  generate  additional  probes  by 
causing  objects  to  fall  onto  the  floor;  therefore,  one  probe  per  SO  ft? 
is  assumed  for  the  0PA  during  an  earthquake. 

The  PLL  term  in  the  above  expression  represents  the  probability 
that  the  probe  has  a  length-to-diaraeter  ratio  (L/D)  which  is  leas  than 
that  which  wsuld  cause  buckling  fsilure  of  the  probe  without  penetration 
of  the  dropped  munition  but  greater  than  that  corresponding  to  a  probe 
length  ~v.hich  is  insufficient  to  penetrate  the  munition.  Probe  dimen¬ 
sions  (diameter  end  L/D)  were  treated  statistically  and  the  minimum 
probe  length  for  penetration  vaa  calculated  for  each  munition. 

The  PD  term  in  the  above  expresaion  represents  the  probability 
that  the  diameter  of  the  probe  is  less  than  or  aqual  to  the  maximum  that 
could  penetrata  the  munition  but  greeter  than  a  minimum  diamater  corres¬ 
ponding  to  the  compreasive  strength  of  the  probe.  The  maximum  diameter 
of  the  probes  which  could  penetrate  through  the  munition  vail  is  deter- 
mined  from 

(W  x  H)0-667 
°u  "  672  t 
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where  Du  ■  maxinum  probe  diameter  (in.)* 

W  ■  weight  of  nunitlon/paliet  (lb), 

H  -  drop  height  (ft), 
t  •  munition  thickness  (in.). 

These  expressions  ere  teken  from  Ref.  C-2. 

The  nunitlon  eree  vulnerable  to  probe  penetration  (Ag)  was  deter* 
mined  eseuming  a  maximum  probe  length  of  2  in.  This  term  was  calculated 
for  each  munition/pallet  configuration  of  interest  and  reflects  the  num¬ 
ber  of  nunitions  involved  in  each  handling  operation.  Thus,  if  more 
than  one  nun it ion  were  being  handled,  the  vulnerable  area  of  each  muni¬ 
tion  was  multiplied  by  the  actual  number  of  munitions  involved  in  the 
handling  event. 

C.  1.1.2.  Forklift  Tine  Puncture 

For  forklift  tine  puncture,  the  munitions  are  at  rest  and  the  probe 
(the  forklift  tine)  is  the  moving  object.  This  mahes  calculating  the 
munition  vulnerability  simpler  since  the  mass  of  the  moving  object  (the 
forklift)  and  the  shape  of  the  probe  (the  tine)  are  the  earns  for  all 
munitions.  The  only  variable  is  the  munition  thickness.  Since  the 
puncture  energy  is  proportional  to  the  thickness  of  the  munition,  the 
relative  puncture  resistance  of  the  munitions  is  simply  the  ri.tlo  of  the 
thicknesses . 

The  probability  P  of  a  forklift  tine  puncture  of  the  munitions  was 
asaumea  to  be  governed  by 

P  -  Px  *  P2  *  N  , 

where  P^  -  the  probability  that  a  munition  is  struck  by  a  forklift  tine 
per  pallet  operetion, 


?2  “  the  probability  that  tha  mini t ion  la  punctured  given  that  the 
forklift  tin*  strikes  the  munition, 

H  »  number  of  handling  operations. 

The  critical  puncture  velocity  Ve  (in  ft/e)  was  determined  from 

Vc  -  ~  (672  Dt)3/2  , 

where  U  *  weight  of  the  forklift  (lb), 

D  »  equivalent  diameter  of  the  forklift  tine  (in.), 
t  -  mmition  wall  thickness  (in.). 
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C.1.2.  WIND-GENERATED  MISSILES 
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The  probability  of  a  wind-generated  missile  rupturing  a  munition  is 
tha  product  of  two  probabilities;  (1)  th«  probability  of  having  a  wind 
of  aufficiant  velocity  to  generate  a  missile  that  can  rupture  a  munition 
and  (2)  the  probability  that  the  missile  hits  tha  munitions  in  an  orien¬ 
tation  that  will  rupture  tba  munition. 

C. 1.2.1.  Required  Wind  Velocity 


The  wind  velocity  required  to  generate  e  missile  that  can  penetrate 
e  munition  is  computed  as  follows; 


1.  Tha  missile  velocity  required  to  penetrate  the  minltlon  is 
computed  using  the  equation  (Ref.  C-2)t 

Vm  -  0.682  (672  Dt)3 /*  , 


where  Vm 
U 
D 
t 


the  penetration  valocity  (mph) , 
the  weight  of  the  missile  (lb), 
the  equivalent  missile  diameter  (in.), 
the  wall  thickness  of  the  munition  (in.). 


Each  munition  was  avaluatad  for  two  critical  missiles t  a 
10-ft  section  of  3-in.  pipe  and  a  13.5-in.  diameter  utility 
pole.  In  addition  to  penetration,  the  utility  pole  was 
avaluatad  to  datarmine  the  valocity  raqulrad  to  crush  the 
munition. 
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2. 


The  miaaila  velocity  required  to  penetrate  the  atoragc 
atruccura  hu  alro  computad  using  tha  following  aquation 
(Raf.  C-2). 


For  concrata  structures) 


V4  -  1000 


-  ..ic  0.7S 
fc  T  D**° 


427  W 


where  T  ■  thickness  of  concrata  element  to  ba  just 
parforatad  (in.)» 

W  ■  weight  of  missile  (lb), 

D  -  diamatar  of  missile  (in.), 

Va  “  striking  velocity  of  miaaila  (fps), 

fc  “  coopraaaiva  atrangth  of  concrata  (pal). 

For  ataal  structures) 

64  ,,, 

V8  -  0.682  (672  DT)3'2 


3.  Tha  miaaila  valocity  required  to  panatrata  both  th«  monition 
and  atructura  ia  computad  uaing  the  following  aquation  which 
la  baaad  on  summing  tha  anargiaa  required  to  penetrate  the 
monition  and  atructura  separately) 

V  -  /V*  ♦  vj  , 

where  Vm  -  valocity  required  to  penetrate  the  munition, 

Vs  »  valocity  required  to  penetrate  tha  atructura. 

4.  Tha  probability  of  tha  required  wind  occurring  was  based  on 
functional  data  for  each  aite. 


C-6 


^  *. 


C . 1 . 2 . 2 .  Probability  of  Hitting  and  Rupturing  the  Munition 


Given  a  sufficient  wind,  th«  probability  that  a  missile  hits  and 
ruptures  a  munition  was  computed  from: 

P  -  Pd  P0  D  A  , 

where  Pd  -  probability  that  the  direction  1  missile  travel  is  nearly 
perpendicular  to  the  target, 

P0  -  probability  that  the  missile  is  criented  to  penetrate  (i.e., 
not  tumbling  or  going  sideways), 

D  »  number  of  missiles  per  unit  area, 

A  «  area  of  target. 

Values  for  Pd,  Pol  and  0  are  difficult  to  evaluate  and  are  not  available 
from  the  literature.  Consequently,  the  values  used  for  the  analysis 
were  computed  based  on  engineering  judgment.  These  values  were  selected 
to  give  a  "best  estimate"  of  the  overall  probability.  The  following  is 
a  discussion  of  these  assumptions. 

The  missile  velocity  must  be  nearly  parpendicular  to  the  wall  of  a 
structure  or  munition  in  order  for  the  missile  to  penetrate.  The  fur¬ 
ther  the  missile  strikes  from  an  angle  which  is  perpendicular,  the  less 
likely  that  the  missile  will  penetrate.  4s  the  angle  deviates  from  the 
perpendicular,  the  effective  thickness  of  sunitlon  increases  propor¬ 
tionally  to  the  reciprocal  of  the  coslna  of  tha  angle  (where  the  angle 
is  measured  froiu  the  perpendicular);  thus,  a  higher  missile  velocity 
(which  has  a  lower  probability  of  occurring)  ia  requited  for  penetra¬ 
tion.  In  addition,  the  missile  Is  mors  likely  to  ricochet  at  higher 
angles.  Based  on  engineering  judgment,  it  is  estimated  that  if  the 
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m.' sails  velocity  la  more  than  30  dag  off  from  parpandlcular ,  the  mlaslla 
will  not  panatrata.  This  ylalda  a  valua  of  0.17  for  P<j. 

Tha  mlaalla  valocity  mat  ba  alignad  along  tha  missile  axis  in 
ordar  for  tha  mlaalla  to  pa.tstrate.  In  othar  words ,  tha  miaaila  mat 
mova  Ilka  an  arrow  tath.tr  than  tumbling  or  going  aidawaya.  Of  tha  two 
mlaailaa  analyzed  t  in  vm  fe  d  that  it  ia  mora  important  that  tfea  pipe 
be  alignad  proper!/  than  tt  -  .  .llity  pola  because  of  tha  larger  impact 
area  of  the  utility  p->Ie,  this  reason,  it  waa  assumed  that  tha 

valocity  rn.it  b*.  aj.ipv.-2 J  */*hin  5  dag  of  tha  axis  of  tha  pipe  and  within 
10  deg  of  b*  axis  of  the  utility  pola.  Theaa  assumptions  rasultad  in 
values  for  or  0.Q0A  tor  tha  pipe  and  0.015  for  tha  utility  pole. 

Tha  path  of  tha  toruado  ia  ganarally  from  1/8  to  3/A  of  a  mile 
wide  (Raf.  C*-3>.  For  this  analysis,  it  waa  assumed  that  tha  tornado 
ia  1/2.  mile  wide  and  that  it  carrlas  ona  utility  pole  and  10  iron  pipes. 
It  waa  further  assumed  that  tha  pipes  a re  evenly  distributed  to  a  height 
of  50  ft  and  the  utility  pola  at  a  height  of  20  ft  (Ref.  C-A  indicates 
the  maxi mum  heights  for  pipes  ia  100  ft  and  for  utility  poles  la  50  ft 
which  indicates  that  our  assumption  ia  conservative).  Therefore,  the 
number  of  miasilea  per  square  foot  of  wind  (0)  ia  7.6  x  10“^  for  pipes 
and  1.9  x  10"^  for  utility  poles. 

The  target  area  is  different  for  each  scenario  and  depends  on 
the  number  of  munitions  lnvolvad  and  tha  storage  configuration  (see 
Ref.  C-l). 

The  product  of  P^,  F0,  end  D  is  approximately  5.0  x  10 _i  for  both 
the  pipes  and  utility  pola. 
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C.1.3.  EARTHQUAKE  AND  WIND  FAILURE  OF  UBC  DESIGNED  STRUCTURES 


C . 1 . 3 . 1 .  Strength  Factor  of  Safety 

Th*  Uniform  Building  Cod*  (UBC)  *n*ur«*  that  structures  ara 
dasignad  with  a  factor  of  safety.  This  factor  of  aafaty  variaa  depend- 
ing  on  th*  type  of  structural  materials  uaad  and  consonants  salactcd. 

For  earthquake  and  wind  loads,  this  factor  of  safety  rangaa  from  1.3 
to  1.6  for  concrate  structural  dasignad  to  ultimata  design  strength 
principals  and  from  2.6  to  3.0  for  concrete  and  steal  structures 
designed  to  working  stress  methods.  For  the  risk  analyses  in  this 
report,  it  is  assumed  that  tha  factor  of  safety  will  ha  1.3  for  concrete 
structures  (sine*  tha  CONUS  structures  ara  being  designed  to  ultimate 
strength)  and  2.6  for  the  stael  structures. 

C. 1.3.2.  Wind  Loads 


For  UBC-daaigned  concrete  structures  such  as  tha  MDB,  wind  does  not 
govern  th*  design  of  th*  main  structural  components.  The  MDB  is  a  rigid 
concrete  moment  resisting  framed  and  shear  wall  structure  and  will  fall 
under  seismic  conditions  only.  For  the  steel  structures  such  as  the 
bulk  agent  warehouses,  th*  wind  governs  the  design  in  most  cases.  Wind 
loads  will  fail  the  walls  of  the  structure  before  th*  structure  will 
collapse.  Since  the  stresses  in  a  structure  due  to  winds  are  propor- 
tional  to  the  square  of  the  wind  velocity,  a  wind  velocity  which  is  1.6 
(square  root  of  the  2.6  factor  of  safety  on  strength)  times  greater  than 
the  design  wind  load  can  be  expected  to  fail  the  walls  of  the  steel 
structure. 

C. 1.3.3.  Earthquake  Loads 

The  Applied  Technology  Council  'ATC),  which  if  associated  with  the 
SEAOC,  presents  a  aat  of  curvaa  that  can  ba  ussd  to  astimate  the  proba¬ 
bility  of  an  earthquake,  which  exceeds  s  epncific  g-level,  occurring 


anywhere  in  th«  U.S.  (Ref .  C-5).  These  curves  srs  shown  in  Section  4.2. 
Each  curve  represents  e  seismic  step  eree  which  is  similar  to  the  seismic 
tones  used  by  the  UBC.  Ths  ATC  divided  the  country  into  seven  seismic 
map  areas  (1-7).  The  UBC  uses  five  seismic  zones  (0-4).  Reference  C-S 
contains  amps  showing  the  seismic  map  areas.  These  maps  color  coda  the 
seismic  map  areas,  and,  consequently,  have  not  been  reproduced  for  this 
report  since  a  black  and  white  reproduction  would  not  be  helpful.  The 
maps  show  that  APG,  AN AD ,  LB  AD ,  PBA,  UMDA,  and  PUDA  are  in  seismic  map 
area  2)  NAAP  is  in  seismic  step  area  3}  and  TRAD  is  in  seismic  map 
area  5. 

Section  4.2  presents  the  seismic  risk  curves  for  seismic  map 
areas  2,  3,  5,  and  7. 

The  earthquake  g-level  that  will  fail  a  structure  depends  on  four 
principal  factorat  (1)  the  design  g-level,  (2)  the  strength  factor  of 
safety,  (3)  the  dynamic  emplif ication  in  the  structure,  and  (4)  the  duc¬ 
tility  of  the  structure.  The  dynamic  amplification  factor  reduces  the 
factor  of  safety,  and  the  ductility  increases  the  factor  of  safety.  The 
dynamic  amplification  factor  has  been  conservatively  estimated  at  2.3 
based  on  a  referenced  analysis  (Ref.  C-6).  Ductility  factors  arc  esti¬ 
mated  to  be  in  the  range  of  2.5  to  3.5  for  concrete  structures  with 
shear  walls  and  from  3.5  to  5.0  for  steel  structures.  For  this  anal¬ 
ysis,  2.5  vss  used  for  concrete  walls  and  3.5  was  used  for  steel-walled 
structures.  Based  on  these  fsetors,  s  UBC  structure  with  concrete  vails 
was  assumtd  to  fall  at  an  aarthquaka  g-laval  that  ia  approximately  1.4 
times  the  design  g-laval,  and  a  UBC  structure  with  steel  walls  was 
assumed  to  fail  et  a  g-laval  that  is  approximataly  4.0  timeu  graatar 
than  the  design  g-level. 

For  UBC  designed  structures  with  concrete  walls  in  Seismic  Ron e  3 
(design  g-level  of  0.14),  the  expected  failure  g-level  ia  0.4  g.  Due 
to  the  uncerteinty  of  the  analysis,  there  is  a  probability  that  the 
structure  will  survive  larger  earthquakes  or  will  fall  during  smaller 
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earthquakes.  Consequently ,  the  following  probabilities  of  failure  have 
been  assumed: 

1.  A  0.3-g  earthquake  has  a  0.1  probability  of  producing  failure. 

2.  A  0.4-g  earthquake  has  a  0.5  probability  of  producing  failure. 

3.  A  0.5-g  earthquake  has  a  0.9  probability  of  producing  failure. 

4.  A  0.6-g  earthquake  has  a  1.0  probability  of  producing  failure. 

The  failure  g-levela  for  Seismic  Zone  2  are  half  of  the  g-levels  for 
Seismic  Zone  3  since  the  design  g-level  for  Seismic  Zone  2  (0.07  g)  is 
half  the  design  g-level  for  Seismic  Zone  3  (0.14  g). 

For  UBC  designed  structures  with  steel  walls  in  Seismic  Zone  2  (the 
warehouses  at  NAAP  and  HMD A) ,  the  following  probabilities  of  failure 
have  been  assumed: 

1.  A  0.2-g  earthquake  has  a  0.1  probability  of  producing  failure. 

2.  A  0.3-g  earthquake  has  a  0.3  probability  of  producing  failure. 

3.  A  0.4-g  earthquake  has  a  0.9  probability  of  producing  failure. 

4.  A  0.5-g  earthquake  has  a  1.0  probability  of  producing  failure. 


C-ll 


C. 1.4.  EARTHQUAKE  FAILURE  OF  NRC-DESIGNED  STRUCTURES 


The  TOX  cubicle,  tank,  And  piping  system  will  be  designed  to 
Nucleer  Regulatory  Commission  (NRC)  standards  for  nuclear  power  plants. 
In  summary,  this  will  involve  the  following t 

1.  Seismic  experts  will  determine  the  ‘mas imam  credible  earth¬ 
quake"  that  can  occur  at  TEAD  based  on  the  seismic  history  of 
the  area  and  the  proximity  of  earthquake  faults.  This  "maxi¬ 
mum  credible  earthquake"  will  be  selected  as  the  safe  shutdown 
earthquake  (SSE)  to  be  used  as  the  design  earthquake  for  the 
TOX  at  all  eight  sites. 

2.  The  TOX  will  be  analyzed  for  the  SSE  using  finite-element 
time-history  conputer  programs. 

3.  The  TOX  will  be  constructed  to  NRC  standards. 

Since  the  design  g-level  has  not  yet  been  determined,  an  SSE  g-level  had 
to  be  assumed  with  the  intent  to  ensure  that  the  TOX  will  withstand  rel¬ 
atively  high  g-forces.  For  this  risk  analysis,  it  was  conservatively 
assumed  that  the  TOX  will  be  designed  for  a  1-g  SSE. 

Since  the  TOX  will  be  designed  for  no  failures  in  the  event  of  a 
SSE,  an  earthquake  larger  than  the  SSE  will  be  required  to  produce  a 
failure.  Since  the  NRC  seismic  design  requirements  are  quite  different 
from  the  UBC  seismic  requirements,  the  methodology  used  to  determine 
failure  g-levels  for  the  UBC  structures  does  not  apply  to  NRC-deaigned 
structures.  Based  on  CA's  experience  in  seismic  design  of  nuclear  power 
plants,  it  was  estimated  that  an  earthquake  which  is  twice  the  SSE  will 
have  a  O.S  probability  of  either  rupturing  the  TOX  tenk/pipiD'*  system 
or  breaching  the  TOX  wall.  There  is  a  possibility  that  the  TOX  will 
survive  larger  earthquakes  or  that  a  smaller  earthquake  will  causa  a 
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failure.  Consequently i  the  following  probabilities  are  selected  for  the 
rupture  of  the  TOX  storage  tark  and  for  the  breaching  of  the  TOX  walla j 


1.  A  1.8-g  earthquake  has  a  0.1  probability  of  producing  failure. 

2.  A  2.0-g  earthquake  has  a  0.5  probability  of  producing  failure. 

3.  A  3.0-g  earthquake  has  a  0.9  probability  of  producing  failure. 

4.  A  4.0-g  earthquake  has  an  **1.0  probability  of  producing 

failure. 


’-or 
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C.1.5.  METEORITES 


Tha  probability  of  a  aataorlta  panatratlng  •  munition  can  ba  aoti- 
matad  fromi 

P  -  T  <fA  ♦  f()  A  S  , 

whara  f  •  fraquaucy  of  mataorita  atrikaa  par  aquara  foot  of  araa, 

ll  “  fraction  of  tha  striking  mataoritaa  which  ara  iron  mataoritaa 
and  can  paaatrata  tha  targat, 

ia  “  fraction  of  tha  atrlkiug  mataoritaa  which  ara  atona  atataor- 
lta»  and  can  panatrata  tha  targat, 

A  *  araa  of  targat, 

S  •  fraction  of  tha  targat  araa  which  auat  ba  lnpactad  to  ruptura 
a  munition  or  bulk  agant  container  (apaclng  factor). 

Tha  fraquancy  of  mataorita  atrikaa  for  mataoritaa  1.0  lb  or  graatar 
is  0.4  x  I0‘l-Vft2  (Raf.  C«7).  Per  small  mataoritaa  (a  ton  or  laea), 
atona  mataoritaa  ara  approxlmatsly  10  tiaMa  nor  a  common  than  iron  maia- 
orltas  (Raf.  C-8).  Houavsr,  iron  mataoritaa  ara  mors  danaa  and  tsnd  to 
hava  hlghar  impact  valocltiaa,  nnd  conaaquant ly ,  rapraaant  a  algnlflcant 
portion  of  tha  total  mstsorltss  that  can  ruptura  Munition*.  Tha  sirs 
distribution  of  both  iron  and  atona  amcaorltaa  striking  tha  aarth  aur- 
faca  was  aatinatad  from  tha  data  praaantad  in  Raft.  C-7  and  C-8. 

Tha  six#  of  tha  mataorita  rsquirad  to  panatrata  *  aunit  ion  or 
munition  and  atructura  was  conputad  uaing  tha  aquatlona  praaantad  in 
Raf.  C-2.  Tha  impact  valoclty  was  conputad  baaad  on  tha  data  praaantad 
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In  Ref.  C-8,  which  fives  imp set  vslociciss  foe  s  series  of  lerfe  meteor¬ 
ite*.  These  decs  were  plotted  end  extrapoleted  to  estimate  the  veloci- 
ties  for  the  sneller  meteorites.  For  the  smallest  stone  meteorites,  the 
extrapolation  yields  tapact  velocities  which  were  less  than  their  ter¬ 
minal  velocities.  In  these  cases  the  terminal  velocities  ere  used. 


C.1.6.  AIRCRAFT  CRASH 


The  probabilities  used  in  the  analysis  of  crashes  involving  air¬ 
craft  takeoffs  and  landings  were  obtained  by  modifying  Table  C-lt  which 
was  taken  from  Ref.  C-9.  The  following  modifications  were  made  to  this 
tablet 

1.  U.S.  air  carrier  (commercial)  crash  probabilities  between  5 
and  8  miles  from  the  end  of  the  runway  ware  increased  from  0.0 
to  0.14  x  10'®  which  is  equal  to  the  probability  for  crashes 
between  8  and  9  miles  from  the  end  of  the  runway. 

2.  The  probabilities  for  USN/USMC  were  averaged  with  the  proba¬ 
bilities  for  OSAF  to  obtain  probabilities  for  military  air¬ 
craft  in  general. 

3.  The  probabilities  for  crashes  of  military  aircraft  at  dis- 
tancas  which  are  5  to  10  miles  from  the  runway  were  assumed  to 
be  the  same  as  for  U.S.  commercial  air  carriers. 

4.  The  general  aviation  probabilities  for  crashes  which  are  5  to 
10  miles  from  the  and  of  the  runway  are  assumed  to  be  five 
times  greater  than  U.S.  air  carrier  probabilities. 

5.  Helicopter  crash  probabilities  were  assumed  to  be  twice  the 
probabilities  for  general  aviation. 

Tables  C-2  through  C-17  summarize  the  input  data  that  were  used  to 
calculate  the  annual  probabilities  of  both  small  and  large  aircraft 
crashes  at  each  of  the  eight  sites.  The  effective  areas  of  the  crash 
sites  are  summarized  in  Table  C-18. 


TABLE  C-l 

AIRCRAFT  CRASH  PROBABILITIES  NEAR  AIRPORTS <•> 


Distance  From 
End  of  Ruuttay 


Probability  (x  10®  of  a  Fatal  Crash  oar  Square 
Mila  per  Airearft  Movement 


(miles ) 

U.S.  Air  Carrier 

General  Aviation 

0SN/0SMC 

CSAF 

0-1 

16.7 

84.0 

8.3 

5.7 

1*2 

4.0 

15.0 

1.1 

2.3 

2-3 

0.96 

6.2 

0.33 

1.1 

3-4 

0.68 

3.8 

0.31 

0.42 

4-5 

0.27 

1.2 

0.20 

0.40 

5-6 

0 

NA 

NA 

NA 

6-7 

0 

NA 

NA 

NA 

7-e 

0 

NA 

NA 

NA 

9-9 

0.14 

NA 

NA 

NA 

9-10 

0.12 

NA 

NA 

NA 

(■^Reference  C-9. 


TABLE  C-2 

CRASH  OF  A  LARGE  ATRPLANE  AT  A?G 


TABLE  C-3 

CRASH  OF  A  SMALL  AIRP'-ANE  AT  APG 


TABLE  C-4 

.^ASM  Oi'  A  LARGE  AIRPLANE  AT  ANAD 
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TABLE  C-6 

CRASH  OF  A  LARGE  AIRPLANE  AT  LBAD 
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CRASH  OP  A  LARGE  AIRPLANE  AT  NaAP 


TABLE  C-9 
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CRASH  OF  A  LARGE  AIRPLANE  AT  PbA 
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TABLE  C-ll 

CRASH  OF  A  SHALL  AIRPLANE  AT  PBA 
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TABLE  C-t^ 

CHASM  OF  A  SHAuL  A1RPLAH1.  AT  FL’OA 


TABLE  C- 14 

CRASH  OF  A  LARGE  AIRPLANE  AT  TEAD 
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TABLE  C-17 

CRASH  OF  A  SHALL  AIRPLANE  AT  UMDA 
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TABLE  C-18 

EFFECTIVE  AREAS  OF  CRASH  SITES**) 


Storage  Facility 

Large  Aircraft 
Direct  Crash 

Large  Aircraft 
Adjacent  Crash 

Small  Aircraft 
Direct  Crash 

80-ft  igloo 

7.6E-5 

4.8E-5 

0.0E+0 

CC  -ft  igloo 

5.7E-S 

3.7E-5 

0.0E+0 

40-ft  igloo 

3.8DE-5 

2.4E-5 

O.OE+O 

89-ft  magazine 

8.2E-5 

4.6E-5 

l).0E-*-0 

Warehouse  at  TEAn 

2.4E-3 

2.4E-3 

3.0E-3 

Warehouse  at  UMDA 

1.6E-3 

1.8E-3 

2.1E-3 

Warehouse  at  NAAF 

7.9E-4 

1.7E-3 

1.3E-3 

Open  storage  at  AFC 

4.6E-3 

4.5E-3 

5.7E-3 

Open  storage  at  PBA 

1.1E-2 

6.6E-3 

1.3E-2 

Open  storage  at  TEAD 

2.2E-2 

1.2E-2 

2.5E-2 

Train  (SO  cars) 

1.1E-2 

1.6E-2 

5.4E-3 

ECR 

5.4E-5 

•  e» 

•  • 

UFA 

2.4E-4 

— 

1.6E-4 

TOX 

4.1E-5 

— 

— 

Truck 

3.6E-4 

-- 

9.0E-5 

Outside  agent  piping 
at  TEAD 

1.8E-3 

5.9E-4 

**)Units  of  area  is  square  milts. 
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D.l.  SITE  INFORMATION 

This  appendix  discusses  the  location  and  characteristics  cf  the 
eight  CONUS  sites  where  chemical  munitions  ara  atored  and  provides  a 
brief  description  of  the  storage  areas.  Figure  D- 1  shows  the  general 
location  of  the  eight  sites.  The  site  characteristics  discussed 
included  recorded  earthquake  activity  and  aircraft  patterns  in  the 
vicinity. 

D.l.l.  ABERDEEN  PROVING  GROUND 

As  shown  in  Figs.  D-2  and  D-3,  the  Aberdeen  Proving  Ground  (APG)  is 
located  in  Harford  County,  Maryland  near  the  head  of  the  Chesapeake  Bay. 


APG  is  a  Test  and  Evaluation  Command  (TECOM)  instantiation  within 
U.S.  Army  Materiel  Command  (AMC),  The  main  activities /miss ion  of  APG 
include  testing  and  evaluating  vehicles,  nunitions,  and  other  combat 
hardware.  A  major  tenant  activity,  the  Chemical  Research,  Development, 
and  Engineering  Center  (CRDEC),  is  located  at  APG. 

APG  is  comprised  of  tw  general  areas,  the  Aberdeen  Area  and 


j.’  Edgevood  Area.  The  Edgevood  Area  is  situated  adjacent  to  the  town  of 

•  Edgewood  in  the  southwestern  part  of  Harford  County.  There  have 

occurred  in  the  vicinity  of  the  APG  site  48  recorded  earthquakes  of 


Modified  Mercalli  Intensity  (MMI)  levels  from  1  to  VII,  as  summarized  in 
Table  D-l. 

The  chemical  storage  area  at  APG  is  located  in  the  northeast  corner 
of  the  Edgewood  Area  The  Chemical  Agent  Stor  Yard  (CASY)  as  an  op**n 


showing  the  location 


TABLE  D-l 

EARTHQUAKES  IK  THE  VICINITY  OF  THE  APG  SITE 
(Ordered  By  Distance  From  Site) 


Year 

Month 

Day 

Location 

MMI 

Distance 
from  Site 
(to) 

1883 

3 

11 

39. 5N, 

76. 4W 

V 

14 

1883 

3 

12 

39. 5N, 

76. 4W 

V 

14 

1883 

3 

12 

39. 5N, 

76. 4W 

III 

14 

1883 

3 

12 

39. 5N, 

76. 4W 

V 

14 

1939 

6 

22 

39. 5N, 

76. 6W 

III 

28 

1939 

11 

18 

39. 5N, 

76. 6W 

IV 

28 

1939 

11 

26 

39. 5N, 

76. 6W 

V 

28 

1930 

11 

01 

39. IN, 

76. 5W 

IV 

38 

1930 

11 

01 

39. IN, 

76. 5W 

III 

38 

1906 

10 

13 

39. 2N, 

76. 7W 

III 

41 

1910 

04 

24 

39. 2N, 

76. 7W 

III 

41 

1758 

04 

25 

38. 9N, 

76. 5W 

V 

58 

1876 

01 

30 

38. 9N, 

76. 5W 

58 

1978 

07 

16 

39. 9N, 

76. 2W 

V 

58 

1984 

04 

19 

39. 9N, 

76. 3W 

V 

58 

1984 

04 

23 

39. 9N, 

76. 3W 

V 

58 

1910 

01 

24 

39. 6N, 

77. OW 

II 

64 

1828 

02 

24 

38. 9N, 

76. 7W 

65 

1978 

10 

06 

39. 9N, 

76. 5W 

VI 

66 

1885 

03 

09 

40. ON, 

76. 3W 

IV 

67 

1939 

04 

02 

40. ON, 

76. 3W 

II 

67 

1971 

07 

14 

39. 7N, 

75. 6W 

IV 

69 

1971 

12 

29 

39. 7N, 

75. 6W 

IV 

69 

1972 

01 

02 

39. 7N, 

75. 6W 

IV 

69 

1972 

01 

03 

3917N, 

75. 6W 

IV 

-69 

1972 

01 

07 

39. 7N, 

75. 6W 

IV 

69 

1972 

01 

22 

39. 7N, 

75. 6W 

IV 

69 

1972 

01 

23 

39. 7N, 

75. 6W 

IV 

69 

1972 

01 

23 

39. 7N, 

75. 6W 

IV 

69 

1972 

02 

11 

39. 7N, 

75. 6W 

V 

69 

1972 

02 

11 

39. 7N, 

75. 6W 

69 

1972 

08 

14 

39. 7N, 

75. 6W 

IV 

69 

1972 

08 

14 

39. 7N, 

75. 6W 

69 

1974 

04 

28 

39. 7N, 

75. 6W 

IV 

69 

1889 

03 

08 

40. ON, 

76.  OW 

V 

71 

1889 

03 

09 

40. ON, 

76. OW 

71 

1871 

10 

10 

39. 6N, 

75. 5W 

IV 

72 

1879 

03 

26 

39. 2N, 

75. 5W 

V 

72 

1902 

03 

10 

39. 6N, 

77. 1W 

III 

72 

1902 

03 

11 

39. 6N, 

77.  IW 

III 

72 

1903 

01 

01 

39. 6N, 

77. 1W 

I 

72 

1983 

11 

17 

39. 8N, 

75. 6W 

V 

73 

1983 

12 

12 

39. 8N, 

75. 6W 

73 

1871 

10 

09 

39. 7N, 

75. 5W 

VII 

76 

1902 

03 

10 

39. 6N, 

77. 2W 

III 

80 

1902 

03 

11 

39. 6N, 

77. 2W 

III 

80 

1903 

01 

01 

39. 6N, 

77. 2W 

III 

80 

1903 

01 

01 

39. 6N, 

77. 2W 

II 

80 

Data  provided  by  the  Netionel  Geophysical  Date 
Center,  NOAA. 
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River.  The  storage  yard  consists  of  a  central  aisleway  of  finished  con¬ 
crete  and  the  ton  containers  are  secured  over  a  gravel  surface.  There 
are  two  buildings  in  the  CAST  that  are  used  to  store  equipment.  Only 
mustard-f illed  ton  containers  are  stored  at  APG  and  they  are  stored 
outdoors  in  accordance  with  AMC  regulations. 

The  airspace  above  the  Edgewood  area  of  APG  is  continuously 
restricted  (Restriction  Mo.  R-4001A).  Permission  to  fly  at  altitudes 
above  10,000  ft  from  midnight  to  7 >00  AM  may  be  requested  24  hr  in 
advance.  The  Weide  Army  Air  Field  (AAF)  is  located  within  a  mile  of  the 
storage  area.  It  has  a  4600-ft  runway  which  is  used  by  a  general  avia¬ 
tion  flying  club  and  an  Air  National  Guard  helicopter  unit  located  at 
Weide  AAF.  The  Army  estimates  that  there  are  approximately  2600  general 
aviation  operations  (takeoffs/landings),  7200  helicopter  operations,  and 
800  small  fixed-wing  military  operations  per  year  at  Weide.  There  are 
no  large  aircraft  operations. 

Phillips  AAF  la  located  approximately  8  miles  to  the  northeast.  It 
has  three  runways.  The  longest  is  8000  ft.  The  Army  indicates  that  the 
edges  of  the  approach  and  holding  patterns  for  Phillips  are  more  than 
2  miles  north  of  the  storage  area.  Therefore,  they  are  not  considered  a 
threat  to  the  storage  area  per  the  guideline  of  Ref.  D-3. 

There  are  three  other  airports  located  in  the  area.  Baltimore  Air¬ 
park  is  approximately  8  miles  to  the  west  and  has  one  2200-ft  runway. 
Martin  State  Airport  is  located  8  miles  to  the  southeast.  It  has  three 
runways.  The  longest  is  7000  ft.  The  largeet  airport  in  the  area  is 
Baltimore  Washington  International  Airport  which  is  26  miles  southwest 
of  Aberdeen.  Its  longest  runway  is  9500  ft.  There  are  two  low  altitude 
federal  airways  (V378  and  V499)  that  pass  approximately  8  miles  from  the 
storage  area.  The  closest  high  altitude  jet  routes  (J42-8  and  J40)  are 
approximately  14  miles  from  the  storage  area.  These  airports  and  air¬ 
ways  are  not  expected  to  present  a  significant  threat  to  the  storage 
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D.  1.2.  ANNISTON  ARM  DEPOT 

Aj  shown  in  Figs.  D-4  end  D-5,  ths  Anniston  Army  Dspot  (AH AD)  is 
located  within  Cslhoun  County  in  northssat  Alabama  adjacent  to  Fort 
McClellan,  another  active  O.S.  Army  installation.  ANAD  is  a  major  sup¬ 
ply,  stock  distribution,  and  storage  dspot  for  general  and  strategic 
material,  equipment,  and  supplies,  including  amaunition.  Its  functions 
also  include  maintenance  and  disposal  activities  associated  with  ammuni¬ 
tion  supply  and  storage,  such  as  anrainltlon  preservation,  demilitariza¬ 
tion,  surveillance  and  training. 

The  chemical  storage  area  at  ANAD  is  located  along  the  north¬ 
eastern  edge  of  the  installation.  The  chemical  storage  area  is  divided 
into  two  adjacent  areas,  G-block  and  C-block.  The  ANAD  chemical  muni¬ 
tion  stockpile  consists  of  all  munition  types  except  bombs  and  spray 
tanks.  Munitions  are  stored  in  40-ft,  60-ft,  and  80-ft  igloos.  All 
40-ft  and  60-ft  igloos  are  equipped  with  a  single  door,  while  all  80-ft 
igloos  are  equipped  with  a  double  door.  The  igloos  are  well  maintained 
with  no  evidence  of  chronic  structural  problems.  All  igloos  were 
re-waterproofed  in  1984.  The  re-waterproofing  involved  removing  the 
earthen  covering  over  the  igloo  and  sealing  the  concrete  surface  with 
tar.  The  earthen  cover  was  then  replaced  to  specifications. 

The  stockpile  of  chemical  munitions  stored  at  ANAD  includes  105-mm 
cartridges,  4.2-in.  mortars,  155-mm  and  8-in.  projectiles,  115-mm  rock¬ 
ets,  land  mines,  and  ton  containers.  Documentation  indicates  that  all 
of  the  105-mm  projectiles  are  stored  in  the  cartridge  configuration, 
p-ckaged  wo  cartridges  per  box.  All  sainitions  are  stored  in  their 
standard  configurations  in  accordance  with  AMC  regulations. 

As  shown  in  Table  D-2,  five  earthquakes  of  MMI  levels  V  to  VII  have 
occurred  in  the  vicinity  of  the  ANAD  site  in  this  century. 
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TABLE  0-2 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  AN AD  SITE<*> 
( Chronologic al  Listing) 


<»* 

p 

1 

Year 

Month 

Day 

Location 

%» 

s 

1916 

10 

18 

Irondale,  AI. 

p 

33. 5N,  86. 2W 

1927 

6 

16 

Scottsboro,  i 

pf 

34. 7N,  86. 0W 

w 

M 

8 

1931 

5 

5 

Cullman,  AL 
33. 7N,  86. 6W 

w 

1939 

5 

<4 

Anniston,  AL 

< 

i> 

33. 7N,  85.8V 

* 

» 

1 

1975 

6 

28 

Northern,  AL 

®  71  ; 

33. 3N,  86. 6W 

Epleentral  Intensity 
(MMI) 


V  to  VI 


(^Earthquakes  within  a  50-  to  60-mile  radiua  of  tha  Anniston  site, 
abstracted  from  Table  2.5-2,  Clinch  River  Breeder  Reactor  Plant 
Preliminary  Safety  Analysis  Report.  Source:  Ref.  D-l. 


.v.v.vsw,.  >  /  v.V:v.v;Ayi 


Tb«  airspace  above  Che  chemical  munition  storage  area  at  the  ANAD 
is  unrestricted.  The  airspace  just  north  and  northeast  of  the  chemical 
storage  area  is  restricted  continuously  to  24,000  ft  (Restriction  number 
R-2102).  The  area  Just  west  of  the  chemical  minition  storage  area  is 
restricted  up  to  a  5000-ft  level  from  7:00  AM  to  6:00  PM  Monday  through 
Friday  (Restriction  number  R-2101). 

The  closest  major  airfields  are  Anniston  and  Talladega,  both  of 
which  are  approximately  8  miles  from  the  chemical  monition  storage  area. 
Anniston  has  a  7000-ft  runway  and  can  accept  aircraft  as  large  as  a 
Lockheed  C-141.  Air  traffic  flying  in  and  out  of  Anniston  must  stay  to 
the  south  of  the  depot  (Ref.  D-l).  Talladega  has  a  6000-ft  runway.  It 
has  handled  Lockheed  C-13Gs  but  cannot  accept  C-141s.  Air  traffic  com¬ 
ing  out  of  Talladega  oust  stay  west  of  the  depot  (Ref.  0-1).  Conse¬ 
quently,  the  edge  of  the  flight  path  in  and  out  of  Anniston  and  out  of 
Talladega  is  at  least  2  miles  from  the  storage  area. 

To  the  east  and  north  of  the  city  of  Anniston,  there  are  two  small 
airports  and  a  heliport,  the  closest  of  which  is  8  miles  from  the  stor¬ 
age  area.  Air  traffic  from  these  airports  is  not  a  significant  threat 
to  the  storage  area  since  there  is  3  miles  of  restricted  airspace 
between  these  airports  and  the  storage  area. 

There  is  one  low  altitude  federal  airway  (V18)  which  passes  6  miles 
south  of  the  storage  area  and  one  high  altitude  Jet  route  (J14-52)  which 
passes  directly  above  the  storage  area.  The  high  altitude  Jet  route 
is  the  preferred  jet  route  for  air  traffic  between  Atlanta  and  Denver 
(Ref.  D-2).  Military  training  route  IR69  passes  over  the  storage  area 
and  chan  returns  three  miles  south  of  the  storage  area. 


D. 1.3.  LEXINGTON -BLUE  GRASS  ARMT  DEPOT 


V  At 

vy 


As  shown  In  Figs.  D-6  and  D-7,  tha  Lexington-Blue  Grass  Army  Depot: 
(LBAD)  Is  located  in  Madison  County,  south  o£  Richmond,  Kentucky.  The 
primary  mission  of  the  depot  is  to  operate  a  general  supply  and  ammuni¬ 
tion  depot  activity  providing  for  the  receipt,  storage,  issue,  mainte¬ 
nance,  demilitarisation,  and  disposal  of  assigned  commodities. 


The  chemical  munition  storage  area  at  LBAD  is  located  in  the  north 
central  half  of  the  Blue  Grass  facility.  The  chemical  munition  stock¬ 
pile  at  LBAD  consists  of  8-in.  projectiles,  155-tan  projectiles,  and 
M55  rockets.  These  munitions  are  stored  in  89-ft  oval-arch  igloos. 
Seventy-five  percent  of  the  igloos  vers  waterproofed  in  1982.  The  pro¬ 
cedure  Involved  removing  the  earth  covering  the  igloo  to  apply  a  layer 
of  tar,  and  then  replacing  the  earthen  cover. 


Table  D-3  summarizes  earthquake  activity  in  the  vicinity  of  the 
LBAD  site. 


LBAD  airspace  is  not  restricted.  There  are  three  small  airfields 
in  the  vicinity  of  the  depots  Madison  County  Airport,  Berea  Richmond 
Airfield,  and  Galle  Airfield.  Madison  County  Airport  is  approximately 
9  miles  from  the  storage  area.  At  the  Madison  County  Airport,  there  is 
a  civilian  flight  school  which  operates  light  aircraft,  ranging  from 
single  engine  light  planes  up  to  twin  engine  eircraft.  The  flight 
school  uses  two  training  areas  near  the  depot,  one  to  the  north  and  the 
other  to  the  east.  The  Madison  County  airport  has  a  4000-ft  runway. 

The  Berea  Richmond  Airfield  is  approximately  6  miles  from  the  storage 
area  and  can  support  only  light  aircraft  on  its  2400-ft  grass  strip  run¬ 
way.  Calls  is  a  small,  private  airfield  12  miles  esst  of  the  storage 
area.  The  eir  traffic  from  these  airports  over  the  storage  area  is  not 
expected  to  be  a  significant  hazard. 
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TABLE  D-3 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  LBAD  SITE**) 
(Chronological  Listing) 


Year 

Month 

Day 

Location 

Epicentral  Intensity 
(MMI) 

1779 

1 

1 

Kantucky 

38. ON,  84. 0W 

Unknown 

1834 

11 

20 

Northern  KY 

37. ON,  86. 0W 

V 

1933 

5 

28 

Maysvilla,  KY 

38. 7N,  83. 7W 

V 

1954 

1 

1 

Middlesboro,  KY 
36. 6N,  83. 7W 

VI 

1968 

12 

11 

Louisville,  KY 

38. ON,  85. 5W 

V 

1974 

6 

4 

Kantucky 

38. 6N,  84.77W 

V  (eat) 

1976 

1 

19 

Kantucky 

36.88N,  83 . 82 W 

VI 

1979 

11 

9 

NE  Kantucky 
38.42N,  82.88W 

V  Cast) 

1980 

6 

27 

Kantucky 

38.17N,  83.91W 

VII 

1980 

8 

2 

Kantucky 

37.99N,  84.92W 

III 

1980 

8 

22 

Kantucky 

37.99N,  84.92W 

III 

^ ^ Ear thquakaa  within  a  50-  to  60-mile  radius  of  tha  Lexington-Blue 
Graaa  Sita,  abatractad  from  Tabla  2.5-2,  Clinch  Rivar  Braadar  Raactor 
Plant  Preliminary  Safety  Analysis  Raport.  Sourcaj  Ref.  D-l. 


# 


Thar*  is  a  D.S.  Air  Forca  radar  bombing/ a cor lag  detachment  sta¬ 
tioned  at  th*  LEAD  with  frequent  flights  (10  to  11  aircraft  par  day) 
of  Air  Force  B-52,  F-4,  and  F-lll  aircraft  at  low  altitudes  (7S0  and 
3000  ft).  The  flights  are  active  from  11:30  AM  to  3:30  PM  and  from 
6:00  PM  until  midnight  every  day.  They  fly  at  730  ft  under  visual 
flight  rules  and  at  2000  to  3000  ft  under  Instrument  rules  with  a  visual 
observer.  Generally,  they  make  three  simulated  bombing  runs  per  flight 
at  distances  at  least  2  miles  away  from  the  chemical  exclusion  area. 

Per  the  guidelines  of  Ref.  D-3,  this  is  not  expected  to  be  a  significant 
problem. 


D.1.4.  NEWPORT  ARM!  AMMUNITION  PLANT 


The  Newport  Army  Ammunition  Plant  (NAAP)  is  located  in  v»st  cantral 
Indiana,  watt  of  Indianapolis,  as  shown  in  Figs.  0-8  and  D-9.  NAAP  is 
operated  by  Mason  &  Hangar.  Tha  session  of  NAAP  is  to  (1)  manufacture 
explosive  and  chemical  materials,  (2)  fill  chemical  munitions ,  and 
(3)  to  store  chemical  munitions.  Items  1  and  2  are  currently  inactive, 
while  item  3  involves  the  activities  associated  with  storage  of  VX 
chemical  agent  ton  containers. 

The  chemical  storage  area  at  NAAP  includes  a  single  storage  ware¬ 
house  (Building  144)  that  is  used  to  house  VX  ton  containers.  The  stor¬ 
age  building  is  approximately  79  ft  vide  and  279  ft  long.  The  walls  and 
roof  of  the  building  are  of  heavy  gauge  corrugated  sheet  metal,  sup¬ 
ported  by  steal  beams. 

The  warehouse  is  in  an  exclusion  area  adjacent  to  the  former  VX 
production  facility.  The  grounds  within  the  exclusion  area  are  all  con¬ 
crete  or  macadam  covered  surfaces.  There  are  several  large  storage 
tanks  that  were  used  to  store  agent  which  are  located  along  the  south¬ 
east  side  of  the  warehouse.  These  storage  tanka  are  currently  empty. 

A  409-ft  tall  flash  tower  is  located  450  ft  to  the  east  of  Building  144. 
The  flash  tower  was  utilized  during  production  of  VX  to  burn  several 
flammable  gas  by-products.  Just  outsids  the  exclusion  area,  approxi¬ 
mately  560  ft  to  the  east  of  Building  144,  is  the  site  of  a  natural  gas 
metering  station.  Natural  gas  was  distributed  to  the  production  plant 
and  to  the  area  boiler  from  this  point.  Several  empty  storage  vessels 
are  located  approximately  350  ft  from  the  nearest  ton  containers  outside 
the  exclusion  area.  These  tanks  ware  used  in  conjunction  with  the 
former  VX  production  facility.  These  tanka  are  to  remain  empty  during 
Che  demilitarization  campaign. 

Table  D-4  summarizes  earthquake  activity  in  the  vicinity  of  the 
NAAP  site. 
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Fig.  D-9.  County  DAp  showing  the  location  of  NAAP 
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Tha  airspace  at  NAAP  is  not  restricted.  Tha  only  airport  within  a 
10-mila  radius  of  tha  plant  is  a  privata  airstrip  (Rowe)  with  a  2600-ft 
runway  locatad  8  milas  vast  of  tha  plant.  Tha  naarast  public  airport  is 
Clinton  which  is  approximately  12  milas  south  of  tha  plant.  Low  alti¬ 
tude  federal  airway  V171  passes  2  miles  east  of  tha  storage  area  and 
airway  V434  passes  5  milas  north  of  tha  storage  area.  High  altitude 
jet  routes  J80  and  J73  cross  over  the  storage  area. 


TABLE  D-4 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  NAAP  SITE 
(Ordered  By  Distance  From  Site) 


Year 

Month 

Day 

Location 

MW 

Distance 
from  Site 
(km) 

1909 

9 

27 

39. 5N, 

87.4V 

VII 

41 

1921 

3 

14 

39. 5N, 

87. 5W 

IV 

41 

1903 

12 

31 

40. ON, 

87. 9W 

42 

1974 

11 

25 

40. 3N, 

87. 4W 

II 

48 

1906 

7 

13 

39. 7N, 

86. 8W 

r  •» 

1906 

8 

13 

39. 7N, 

86.8V 

IV 

57 

1984 

8 

29 

39. 3N, 

87. 2W 

V 

58 

1978 

2 

16 

39. 8N, 

88.23V 

68 

1984 

7 

28 

39. 2N, 

87.1V 

V 

78 

Date  provided  by  the  National  Geophysical  Data  Center,  NOAA. 
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D.  1.5.  PIKE  BLUFF  ARSEHAL 


As  shown  in  Figs.  D-10  and  0*11,  th«  Pin*  Bluff  Arsenal  (PBA)  is 
located  southeast  of  Little  Rock,  Arkansas  and  northwest  of  the  city  of 
Pin*  Bluff,  Arkaruaa.  Tha  primary  missions  include  storage  of  conven¬ 
tional  and  chemical  munitions ,  destruction  of  nontoxic  chemicals,  and 
production  of  smoke  munitions ,  white  phosphorus  projectiles  and  other 
incendiary  devices.  Future  responsibilities  include  demilitarisation 
of  the  BE  stockpile  and  production  of  binary  chemical  munitionr. 

The  chemical  storage  area  at  PBA  is  lccatad  in  the  northwestern 
section  of  the  installation.  The  following  munitions  are  stored  at  PBA: 
4.2-in.  mortar  projectiles,  H55  rockets,  land  miner,  and  ton  containers. 
All  munitions  except  ton  containers  art'  stored  in  80-ft  igloos.  Ton 
containers  containing  txictard  agent  are  stored  outdoors  in  a  fenced  area 
within  the  chemical  storage  area.  The  ton  containers  are  etrepped  to 
reii-oad  rails  and  stacked  one  high  per  AMC  regulations. 

Table  D-5  summarizes  earthquake  activity  in  the  vicinity  of  the  PBA 

site. 


PBA  airspace  la  not  restricted.  The  closest  important  airfield, 
Crider  Field,  is  about  16  miles  southeast  of  the  chemical  munition  stor¬ 
age  area.  There  ere  three  smaller  airfields  which  sre  closer  (10  to 
14  miles).  Becsuse  of  the  relatively  significant  distances  from  air¬ 
fields,  PBA  is  not  considered  to  have  e  significant  hazard  due  to 
airfield  operations. 

Crider  handles  approximately  115  aircraft  movements  per  day,  seven 
days  e  week.  About  95X  of  this  traffic  is  corporate/civilian,  and  the 
remainder  is  military.  The  runway  at  Crider  Field  is  6,000  ft  and  can 
occasionally  acconroodate  commercial  727  and  military  C-141  aircraft. 

Low  altitude  federal  airways  V74,  V305,  and  V16  pass  within  7,  10,  and 
11  miles,  respectively.  High  altitude  airway  JA2  passes  over  the  site. 
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Fig.  D-  10.  Arkansas  scat*  map  showing  ths  location  of  ?BA 
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There  is  a  helipad  onsite  about  2  miles  sway  from  the  chemical 
munition  storage  area  boundary.  The  £light  frequency  was  estimated  to 
be  30  or  less  flights  a  month  (Ref.  D-l). 


TABLE  D-5 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  PBA  SITE<*> 
(Chronological  Listing) 


Year 

Month 

Day 

Location 

Epicentral  Intensity 
(MMI ) 

1911 

3 

31 

33.8N, 

92. 2V 

VI 

1918 

10 

4 

34. 7N, 

92. 3W 

V 

1930 

11 

16 

34. 3N, 

92, 8W 

V 

1939 

6 

19 

34. IN, 

93. 1W 

V 

1967 

6 

4 

33. 5N, 

9C.8W 

VI 

1967 

6 

29 

33. 5N, 

90. 8W 

V 

1969 

1 

1 

34. 3N, 

92. 6  W 

VI 

1974 

2 

15 

33. 9N, 

93. 0W 

V 

1974 

12 

13 

34. 5N, 

91. 8W 

V 

1978 

9 

23 

33. 6N, 

91.89W 

V 

1982 

1 

21 

35. IN, 

92. 2W 

V 

1962 

1 

24 

35. 2N, 

92. 2W 

V 

1982 

2 

24 

35. IN, 

92. 2W 

V 

1982 

3 

1 

35. IN, 

92. 2W 

V 

1983 

1 

19 

35. IN, 

92. 2W 

V 

Earthquakes  within  a  100  tails  (160  km)  radius  o£  the  Pin*  Bluff 
aits  as  provided  by  the  National  Geophysical  Data  Center,  NOAA. 
Records  believed  to  be  duplicates  are  reported  only  once*  Source: 
Ref.  D-l. 


D.  1.6.  PUEBLO  DEPOT  ACTIVITY 


The  Pueblo  Depot  Activity  (PUDA)  is  under  the  commend  of  the  Tooele 
Army  Depot.  As  shown  in  Pigs.  D-12  end  D-13,  the  Installation  lies  east 
of  the  city  of  Pueblo,  Colorado  end  north  of  the  Arkansas  River.  The 
mission  of  PUDA  facilities  is  to  operate  a  reserve  storage  and  mainte¬ 
nance  function  providing  for  (1)  limited  receipt,  storage,  and  iasue  of 
assigned  commodities;  (2)  depot  maintenance  of  assigned  commodities; 

(3)  limited  maintenance  of  facilities  to  prevent  deterioration  of  the 
ammunition  stockpile;  (4)  operation  of  a  calibration  service  for  an 
assigned  geographical  area;  (5)  demilitarization  and  disposal  of  deteri¬ 
orated  explosives  and  munitions;  (6)  ammunition  surveillance;  (7)  small 
arms  clipping  and  linking;  (8)  operation  of  the  Function/Trace  Test 
Range;  and  (9)  missile  maintenance /product ion. 

The  chemical  storage  area  at  PUDA  is  located  in  the  northeast  cor¬ 
ner  of  the  depot  in  the  G-block  storage  area.  The  following  munitions 
are  stored  at  PUDA:  155-mm  projectiles,  105-nsn  cartridges  and  projec¬ 
tiles,  and  4.2-in.  mortar  projectiles.  All  sunitions  are  stored  in 
80-ft  igloos. 

Table  D-6  sunnnarizes  earthquake  activity  in  the  vicinity  of  the 
PUDA  site. 

The  airspace  at  the  PUDA  is  not  restricted.  There  is  a  private 
airport  (Youtsey)  a  few  miles  south  of  the  depot.  The  nearest  public 
airport  is  Pueblo  Memorial  which  is  located  6  miles  west  of  the  bound¬ 
ary  of  the  depot.  This  airport  has  four  runways,  the  longest  being 
10,300  ft.  Pueblo  Memorial  is  used  as  a  training  airport  for  both  com¬ 
mercial  and  military  aircraft.  Low  altitude  federal  airways  V10,  V19, 
V81,  V83,  V244,  and  V389  all  pass  within  a  few  miles  of  the  depot,  as  do 
high  altitude  jet  routes  J17  and  J28. 
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TABLE  D-6 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  PUDA  SITE 
(Ordered  By  Diatanc*  From  Sit*) 


Y**r 

Month 

D*y 

Location 

MMI 

Distance 
from  Site 
(km) 

1963 

11 

13 

38. 3N, 

104. 6W 

IV 

22 

1870 

12 

4 

38. 5N, 

104.0V 

VI 

37 

1955 

11 

28 

38. 2N, 

103.7V 

IV 

58 

1925 

2 

IS 

38. 2N, 

105.1V 

IV 

67 

1888 

10 

23 

38. IN, 

105 . 2V 

IV 

78 

D*t*  provided  by  th«  Nation*!  G*ophy*ic*l  Data  Center,  NOAA. 
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D.7.  TOOELE  ARM?  DEPOT 


Th«  Tooele  Army  Depot  (TEAD)  is  located  in  north  central  Utah 
southwest  of  Salt  Lake  City  as  ahc’.n  in  Figs.  D-14  and  D-15.  The  Army 
Depot  consists  of  two  separate  areas ,  North  and  South.  The  chemical 
agent  storage  and  demilitarisation  operations  are  located  in  the  South 
Area.  The  mission  of  TEAD  is  to  operate  a  supply  depot  providing  for 
receipt,  storage  issue,  maintenance  and  disposal  of  assigned  commodi¬ 
ties;  and  to  operate  other  facilities  such  as  the  Chemical  Agent 
Munitions  Disposal  System  (CAMDS). 

The  chemical  storage  area  at  TEAD  is  located  in  the  center  of  the 
south  area.  There  are  storage  magazines,  warehouse  buildings,  and  sev 
eral  storage  yards  within  the  chemical  agent  exclusion  area.  The  stor¬ 
age  magazines  include  both  89-ft  oval-arch  magazines  and  80-ft  igloo 
magazines.  MSS  rockets,  155-nsn  and  8-ln.  projectiles,  105-mm  cartridge 
projectiles,  4. 2-in.  mortar  projectiles,  CB  and  VX  ton  containers,  M23 
land  mines,  and  weteye  bombs  are  stored  in  the  80-ft  igloos.  MC-1 
bombs,  ISS-mm  and  105-nm  projectiles  are  stored  in  the  89-ft  oval-arch 
magazines.  Ton  containers  containing  Bustard  are  stored  outdoors.  The 
tw  warehouse  buildings  currently  are  used  to  store  VX  spray  tanks 
packaged  inside  TMU-28/B  storage  and  shipping  containers. 

The  warehouse  buildings  are  flat-roofed,  single-story  structures 
approximately  188  ft  long,  179  ft  vide,  and  16  ft  high.  Details  of  con 
struction  are  shown  in  Army  Corps  of  Engineers  Drawing  201-25-65.  The 
side  valla  of  the  buildings  are  single  piece  precast  concrete  panels 
6  in.  thick,  16  ft  high,  with  widths  varying  around  30  ft.  The  roof  is 
of  corrugated  sheet  metal,  supported  by  a  steal  beam  support  structure 
and  steel  box  beam  vertical  support  columns.  The  main  beams  are  W24  x 
68  steel  I-beams  with  unsupported  spans  of  about  30  ft.  Open  trusses 
are  used  to  span  between  the  main  beams. 
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Fig.  D-14.  Uteh  State  asp  showing  the  location  of  TEAD 
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Table  D-7  summarizes  earthquake  activity  in  the  vicinity  of  the 
TEAO  site. 

The  sirspsce  over  the  TEAD  South  Ares  is  not  restricted  but  pilots 
ere  requested  (for  reasons  of  national  security)  to  svoid  flying  below 
6400  ft  over  this  area  for  a  radius  of  3  nautical  miles  (3.5  statute 
miles) . 

Tooele  Municipal  Airport  is  the  nearest  airport  to  the  site.  It 
is  located  14  miles  north  of  the  site  and  is  not  expected  to  present  a 
significant  hazard. 

There  are  tws  low  altitude  federal  airways  in  the  vicinity  of  the 
TEAD  South  Area:  V257,  three  miles  to  the  west,  and  V253,  17  miles  to 
the  northeast.  High  altitude  airways  are  not  considered  a  hazard  for 
this  site. 

There  is  a  helipad  located  near  the  administrative  building  approx¬ 
imately  3  miles  from  the  chemical  munition  storage  area.  The  helipad 
is  used  infrequently.  The  number  of  flights  per  month  is  estimated  to 
be  15. 
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TABLE  D-7 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  TEAD  SITE<*> 
(Chronological  Listing) 


Epicantral  Intansity 


Y««r 

Month 

Day 

Location 

(MMI 

1853 

12 

1 

39. 7N, 

111.8U 

V 

1876 

3 

22 

39. 5N, 

111.5V 

VI 

1880 

9 

17 

40. 8N, 

112. OW 

V 

1884 

11 

10 

40. 8N, 

111.9W 

VIII 

1894 

1 

8 

39. 7H, 

113. 4W 

V 

1894 

6 

8 

39. 9N, 

113.4V 

V 

1894 

7 

18 

41. 2N, 

112. OV 

VII 

1899 

12 

13 

41. ON, 

112. OV 

V 

1900 

8 

1 

39. 8N, 

112. 2W 

VII 

1906 

5 

24 

41. 2N, 

112. OV 

V 

1909 

11 

17 

41. 7N, 

112.2V 

V 

1910 

5 

22 

40. 8N, 

111.9V 

VII 

1914 

4 

8 

41. 2N, 

111.6V 

V 

1915 

7 

15 

40. 3N, 

111.7V 

VI 

1915 

7 

30 

41. 7N, 

112.1V 

V 

1915 

8 

11 

40. 5N, 

112.7V 

V 

1915 

10 

5 

40. IN, 

114. OW 

V 

1916 

2 

5 

40. ON, 

111.7V 

V 

1920 

9 

18 

41. 5N, 

112. OW 

VI 

1920 

9 

19 

41. 5N, 

112. OW 

VI 

1920 

11 

20 

41. 5N, 

112. OV 

VI 

1934 

3 

12 

41. 5N, 

112. 5W 

VIII 

1934 

4 

14 

41. 5N, 

112. 5W 

1934 

5 

6 

41. 7N, 

113. OW 

1938 

7 

9 

40. 5N, 

111.6W 

V 

1938 

6 

30 

40. 5N, 

111.6W 

VI 

1943 

2 

22 

40. 4N, 

111.8W 

VI 

1947 

3 

7 

40. 5N, 

111.6W 

V 

1949 

3 

7 

40. 5N, 

111.6W 

V 

1950 

5 

8 

40. ON, 

111.5W 

V 

1951 

8 

12 

40. 2N, 

111.4W 

V 

1952 

9 

28 

40. 3N, 

111.5W 

V 

1953 

5 

24 

40. 5N, 

111.5W 

VI 

1955 

2 

4 

40. 5N, 

U1.6W 

V 

1955 

5 

12 

40. 4N, 

111.6W 

V 

1958 

2 

13 

40. 5N, 

111.5W 

VI 

1958 

11 

28 

35. 4N, 

111.5W 

V 

1958 

12 

1 

40. 5N, 

112. 5W 

V 

1958 

12 

2 

40. 5N, 

112. 5W 

V 

1961 

4 

16 

39. IN, 

111.5W 

VI 

1962 

9 

5 

40. 7N, 

112. OW 

VI 

1963 

7 

7 

39. 6N, 

111.9W 

VI 

1963 

7 

9 

40. ON, 

111.2W 

1963 

7 

10 

39. 9N, 

111.4W 

V 

1965 

5 

11 

41. ON, 

111.5W 
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TABLE  D-7  (Continued) 


lb 

** 

I 

h 

» 

f 

j 

s 

I 

•w 


» 


I 

► 

S.' 

\' 

i 


Tear 

Month 

Day 

Location 

Epicentral  Intensity 
(MMI ) 

1966 

5 

23 

39. 2N, 

111.4V 

1967 

2 

16 

41. 3N, 

113. 3W 

V 

1967 

9 

24 

40. 7N, 

112.1V 

V 

1967 

12 

7 

41. 3N, 

111.7V 

V 

1968 

1 

16 

39. 3N, 

112.2V 

V 

1968 

11 

17 

39. 5N, 

110.9V 

V 

1969 

5 

23 

39. ON, 

111.8V 

V 

1970 

4 

14 

39. 6N, 

110.7V 

V 

1970 

10 

25 

39. IN, 

111.3V 

V 

1972 

10 

1 

40. 5N, 

111.3V 

VI 

1972 

10 

16 

40. 4N, 

111.0W 

V 

1973 

7 

16 

39. IN, 

111.5V 

V 

1977 

11 

28 

41. 3N, 

111.6V  . 

V 

1978 

2 

28 

40. 7N, 

112.2V 

V 

1978 

3 

9 

40. 7N, 

112. 0W 

VI 

1978 

3 

13 

40. 7N, 

112.0V 

V 

1980 

5 

24 

39. 9N, 

111.9V 

V 

1981 

2 

20 

40. 3N, 

111.7V 

V 

1981 

5 

14 

39. 4N, 

111.0V 

V 

1983 

10 

8 

40. 7N, 

111. 9W 

VI 

^ * ) Earthquakes  within  a  100-mil*  radios  of  TEAD  es  provided  by  the 
National  Data  Center,  NOAA.  Records  believed  to  be  duplicated  are 
reported  only  once.  Source:  Ref.  D-l. 
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D.  1.8.  UMATILLA  DEPOT  ACTIVITY 

The  Umatilla  Depot  Activity  (UMDA)  is  under  the  commend  of  TEAD. 

As  shown  in  Figs.  D-16  end  D-17,  the  instelletion  is  loceted  in  Ometilla 
end  Merrow  Counties  in  northeastern  Oregon,  near  the  south  shore  of  the 
Columbia  River,  west  of  Hermiston,  Oregon.  UMDA’s  mission  is  to  operate 
a  reserve  storage  depot  activity  under  the  connand  of  TEAD  providing 
care  and  preservation  for  and  minor  maintenance  of  assigned  commodities. 

The  storage  area  is  located  at  the  northern  edge  of  the  instal- 
lation.  Eighty-foot  igloo  magazines  and  warehouses  are  used  to  store 
the  chemical  munition  stockpile  of  155-irm  and  8-in.  projectiles,  MSS 
rockets,  M23  land  mines,  bombs,  spray  tanks,  and  ton  containers.  Ware¬ 
houses  are  used  to  store  ton  containers  containing  Bustard  agent.  The 
magazines  are  spaced  400  ft  apart. 

The  warehouses  are  butler  type  buildings  connected  by  a  roof  with  a 
steel  structure  and  aluminum  aiding  (single  sheet).  The  two  buildings 
are  defined  as  transitory  structures,  approximately  154  ft  wide  (total 
for  both  buildings)  and  300  ft  long. 

Table  D-8  summarizes  earthquake  activity  in  the  vicinity  of  the 
UMDA  site. 

The  UMDA  airspace  is  not  restricted.  The  nearest  active  air¬ 
field  to  the  Umatilla  aite  is  Hermiston  Municipal  Airport  approximately 
12  miles  from  the  depot.  With  one  4000-ft  runway,  its  capebilitles  are 
limited  to  aircraft  up  to  the  size  of  corporate  jets.  The  Tri-Cities 
Airport  in  Pasco,  Washington,  with  a  mavimim  runway  length  of  7700  fc, 
is  approximately  30  miles  from  the  depot.  In  general,  it  does  not  han¬ 
dle  military  aircraft.  Thera  is  also  a  paved  runway  on  the  UMDA  site 
capable  of  handling  small  aircraft  up  to  the  size  of  a  Beech  U-21  light 
utility  aircraft.  The  nearest  military  airfields  are  in  Spokane, 
Washington;  Mosaa  Lake,  Weshington;  end  Mt.  Home,  Idaho. 
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Pie.  D-17.  County  map  showing  the  location  of  UMDA 


TABLE  D-8 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  UMDA  SITE**) 
(Chronological  Listing) 


Year 

Month 

Day 

Location 

Eplcentral  Intensity 
(KKI) 

1893 

3 

5 

Umatilla,  OR 

VI 

1918 

11 

1 

46. 7N,  119.5V 

V  to  VI 

1921 

9 

14 

Dixie,  VA 

V  to  VI 

1924 

1 

6 

Valla  Valla,  VA 

rv 

1924 

1 

6 

Milton  Veston,  OR 

V 

1924 

5 

26 

Valla  Valla,  VA 

IV 

1926 

4 

23 

Valla  Valla,  VA 

IV 

1936 

7 

15 

46. ON,  118. 5W 

VII 

1936 

7 

18 

46. ON,  118.3V 

V 

1936 

7 

20 

Freewater,  OR 

IV 

1936 

8 

4 

45. 8N,  118.6V 

V 

1936 

11 

17 

Valla  Valla,  VA 

III 

1937 

2 

9 

Valla  Valla,  VA 

IV 

1937 

6 

4 

Valla  Valla,  VA 

IV 

1938 

8 

11 

Milton,  OR 

IV 

1938 

10 

27 

Milton,  OR 

IV 

1944 

9 

l 

Valla  Valla,  OR 

IV 

1945 

9 

22 

Valla,  Valla,  OR 

IV 

1951 

1 

7 

McNary,  OR 

V 

1959 

1 

20 

Milton-Freewatar ,  OR 

V 

1959 

11 

9 

Heppner,  OR 

IV 

1971 

10 

25 

46. 7N,  119.5V 

IV 

Earthquakes  within 

a  50- 

to  60-mile  radius  of  the 

Umatilla  site, 

abstracted  from  Table  2.5-2,  UNI-M-90,  "N  Reactor  Updated  Safety 
Analysis  Report,-  United  Nuclear  Industries,  Inc.,  February  28, 
1978.  Source:  Ref.  D-l. 


The  Medium  Attack  Tactical  Electronic  Warfare  Wing  bombing  range  is 
located  10  miles  to  the  southwest  of  OHDA  chemical  munitions  exclusion 
area.  This  area  is  a  restricted  airspace  (Restriction  numbers  R-5701, 
R-5704,  R-5706)  in  which  the  Navy  holds  bombing  exercises.  Grumnac  A-6 
aircraft (  in  groups  of  four,  fly  about  14  sorties  during  the  day  and 
ten  sorties  at  night,  five  days  a  week,  dropping  inert  25-lb  bombs  and, 
occasionally,  500-  to  1000-lb  inert  bombs.  Per  the  guidelines  of 
Ref.  0-8,  this  is  not  considered  a  significant  threat.  There  are  two 
low  altitude  federal  airways  in  the  general  area  of  the  depot:  V-4  and 
V-112.  Three  high  altitude  airways  (J-16,  J-20,  and  J-54)  cross  within 
6  miles  of  the  depot  toward  Pendleton,  Oregon. 

The  installation  provides  limited  maintenance  to  preclude 
deterioration  of  facilities  and  retains  limited  shipping  and  receiving 
capabilities. 
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F.l.  MUNITION  FAILURE  THRESHOLDS 


The  monition  stockpile  is  comprised  of  11  different  munition  types. 
This  sppendix  conteins  a  description  of  the  physical  characteristics  of 
each  munition  type,  a  description  of  their  existing  storage  configure* 
tions,  and  a  description  of  the  munition  failure  thresholds  that  are 
Important  for  quantifying  the  agent  release  associated  with  each 
accident  scenario.  The  failure  thresholds  discussed  herein  are  the 
thresholds  for  accidental  burster  detonation,  the  thermal  threshold  for 
hydraulic  rupture  of  the  agent  compartment,  and  the  mechanical  failure 
thresholds  which  lead  to  failure  of  the  agent  compartment. 

F. 1.1.  DESCRIPTION  OF  CHEMICAL  MUNITIONS 

The  chemical  stockpile  is  presently  made  up  of  the  following 
inanitions  < 

1.  8-in.  artillery  projectiles.  The  8-in.  projectiles  are  filled 
with  the  nerve,  egent  either  GB  or  VX.  They  are  stored 
without  fuzes,  but  they  may  be  stored  with  or  without 
bursters.  The  8-ln.  projectiles  are  stored  on  wooden  pallets 
with  six  rounds  per  pallet. 

2.  155-ara  artillery  projectiles.  The  155-mm  projectiles  may 
contain  GB,  VX,  or  mustard.  They  are  stored  without  fuzes, 
but  they  may  be  with  or  without  bursters.  The  155-mm  projec¬ 
tiles  ere  stored  on  wooden  pallets  with  eight  rounds  per 
pallet. 

3.  105-n*n  artillery  rounds.  The  rounds  are  filled  with  either 
mustard  or  GB.  The  rounds  may  be  stored  as  bare  projectiles 


on  wooden  pallets,  with  24  rounds  psr  pallet,  and  with  2  pal- 
lats  buttad  together  and  sacurad  with  staal  banding,  or  as 
careridgas  in  fibar  tubas,  with  two  tubas  in  a  woodan  fiald 
box,  and  with  aithar  12  or  15  boxas  unitized  on  a  skid  based 
woodan  pallet.  The  cartridges  include  burster,  fuze,  car¬ 
tridge  case  and  propellant. 

4.2-in.  mortar  projectiles.  All  are  filled  with  mustard 
agent.  The  mortars  may  be  stored  with  burster,  fuze,  and  pro¬ 
pellant  in  fibar  tubes,  with  two  tubas  in  a  wooden  field  box, 
with  aithar  36  boxas  on  a  woodan  pallet,  or  24  boxas  on  a 
woodan  skid  base.  The  mortars  may  also  be  stored  without 
burster  and  fuze  in  wooden  pallets. 

M2 3  land  mines.  All  land  mines  are  filled  with  VX.  The  mines 
are  bur stared,  and  are  packaged  three  to  a  steal  drum.  Mine 
activators  and  fuzes  are  packaged  separately  in  the  same  drum. 
Twelve  drums  are  contained  on  a  wooden  pallet. 

M55  rockets.  The  M55  rockets  are  filled  with  either  GB  or  VX. 
The  rockets  are  equipped  with  fuzes  and  bursters  which  contain 
explosives.  Propellant  is  also  built  into  the  motor  of  the 
rocket.  The  rocket  casing  is  made  of  aluminum  which  may 
slowly  react  with  nerve  agent  to  form  hydrogen  gas.  Pressure 
buildup  in  some  of  the  rockets  has  caused  a  leakage  problem. 

The  rockets  are  individually  packaged  in  fiberglass  shipping 
tubes  with  metal  end  caps.  Fifteen  containers  with  rockets 
are  packed  on  a  wooden  pallet. 

MC-1  750- lb  bombs  filled  with  GB.  The  MC-1  bombs  are  stored 
without  explosive  components  on  wjoden  pallets  with  two  bombs 
per  pallet. 


W\ 


f 


8.  MR-94  SOO-lb  bombs  filled  with  CB.  The  MR-94  bombs  sr«  stored 
without  explosive  components  in  individual  MR-410  storage  and 
shipping  containers. 

9.  MR- 116  (Wateye)  600-lb  Navy  bombs  filled  with  GB.  These  bombs 
are  stored  without  explosive  components  in  individual  MR-398 
storage  and  shipping  containers. 

10.  TMU-28/B  airborne  spray  tanka  filled  with  VX.  They  were 
designed  for  releasing  chemical  agent  from  alow-traveling, 
low-flying  aircraft.  The  spray  tanks  are  stored  in  Individual 
CNU-77/E23  storage  and  shipping  containers. 

11.  Ton  containers.  A  large  fraction  of  the  chemical  stockpile  is 
stored  in  bulk  form  in  cylindrical  steel  containers  raferrcd 
to  as  ton  containers.  The  ton  containers  may  contain  GB,  VX, 
or  mustard.  The  ton  containers  are  not  palletized,  but  are 
bended  together  in  clusters. 

Drawings  and  photographs  of  each  of  the  above  munitions  are  shown 
in  Figs.  F-l  through  F-35. 

During  transportation  of  the  munitions,  either  to  an  ocsite  dis¬ 
posal  facility  or  an  offsite  disposal  facility,  the  munitions  are  placed 
in  a  protective  shipping  container  or  package.  The  shipping  package  has 
not  yet  been  designed,  but  criteria  for  the  structural  and  thermal 
protection  to  be  provided  during  munition  transport  are  defined  in 
Ref.  F-l. 
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Fig.  P-1.  Projectile,  8-in.,  GB,  M426 


